If I'm not mista= ken, commands are no longer allowed in a URL string, for security reasons. C= hris? Donovan?
Yes. I added it to the Command Secu= rity list, saved and restarted the server. I also tried Allow(ing) all comma= nds.
Is search enabled as a URL parameter= ? Usually the security is set higher than that to prevent bad actors from in= jecting commands.
= --Apple-Mail-8126EDC9-A7D4-4CB3-98C5-8DD518B22862--
Associated Messages, from the most recent to the oldest:
--Apple-Mail-8126EDC9-A7D4-4CB3-98C5-8DD518B22862 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Which brings up the question=E2=80=A6 why isn't there a new command referenc= e? Or is there one that is not in the package? Sent from my iPod > On Sep 19, 2014, at 11:40 AM, Terry Wilson
wrote: >=20 > If I'm not mistaken, commands are no longer allowed in a URL string, for s= ecurity reasons. Chris? Donovan? >=20 > Terry >=20 >> On Sep 18, 2014, at 11:33 AM, Stephen Reiss wrote: >>=20 >> Yes. I added it to the Command Security list, saved and restarted the ser= ver. I also tried Allow(ing) all commands. >>=20 >>> On Sep 18, 2014, at 2:34 PM, William DeVaul wrote: >>>=20 >>> Is search enabled as a URL parameter? Usually the security is set higher= than that to prevent bad actors from injecting commands.=20 >>>=20 >>>> On Thu, Sep 18, 2014 at 12:19 PM, Stephen Reiss wrote= : >>>> OooK=E2=80=A6=20 >>>>=20 >>>> I implemented a standard [shownext], going so far as to copy and paste i= t out of the reference. The results page shows the "Show Items x- y" as expe= cted, but here is the weird part=E2=80=A6=20 >>>>=20 >>>> The URL it generates is the expected http://URL/results.html?command=3D= search&db=3DDatabase.db&eqDATAdatarq=3DTrue&NAMEsort=3D1&max=3D20&startAt=3D= 21 but I get this rather surprising error: Error: WebCatalog does not unders= tand the 'search' command (emphasis added). >>>>=20 >>>> I am pretty sure WebCatalog needs to understand the 'search' command! >>>>=20 >>>> I have tried creating a test page and sending a simple command=3Dsearch= URL with the same results. With both .html and .tpl or even no extensions. (= Another mystery is why I can get WC to parse, or at least throw the error, a= ny random file name as long as it has an extension). >>>>=20 >>>> It is having no issue with the [search] command. >>>>=20 >>>> I rebooted the whole server, no change. >>>> --------------------------------------------------------- This message i= s sent to you because you are subscribed to the mailing list . To unsubscrib= e, E-mail to: archives: http://mail.webdna.us/list/talk@webdna.us Bug Report= ing: support@webdna.us >>>=20 >>> --------------------------------------------------------- This message i= s sent to you because you are subscribed to the mailing list . To unsubscrib= e, E-mail to: archives: http://mail.webdna.us/list/talk@webdna.us Bug Report= ing: support@webdna.us >> --------------------------------------------------------- This message is= sent to you because you are subscribed to the mailing list . To unsubscribe= , E-mail to: archives: http://mail.webdna.us/list/talk@webdna.us Bug Reporti= ng: support@webdna.us >=20 > --------------------------------------------------------- This message is s= ent to you because you are subscribed to the mailing list . To unsubscribe, E= -mail to: archives: http://mail.webdna.us/list/talk@webdna.us Bug Reporting:= support@webdna.us --Apple-Mail-8126EDC9-A7D4-4CB3-98C5-8DD518B22862 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable Which brings up the question=E2=80=A6 w= hy isn't there a new command reference? Or is there one that is not in the p= ackage?
Sent from my iPod
If I'm not mista= ken, commands are no longer allowed in a URL string, for security reasons. C= hris? Donovan?
Terry