A question about security
This WebDNA talk-list message is from 1998
It keeps the original formatting.
numero = 16551
interpreted = N
texte = I am just about to buy Wcat 2.1 Mac but now I am not shure if I understandthe WCat manual correctly.In the Wcat preferences, you can specify all commands that you want to beused by anonymous visitors by (Allow Commands).If I want to use an online store like Tea Room, I have to allow commandslike replace, add, search, delete and so on.But now, ANY user can edit ANY record in ANY database used by Wcat on myserver, if he is smart enough to understand the command syntax.Even if he has to find a fitting template to SEE contents, he can do enoughto get me in serious trouble.Because I want to host an online store on my server, and also someconfidential databases which I want to use for online-games (I am usingcontexts there for security reasons), I guess I am in a bit of trouble now.Or am I missing something?RegardsMatthias Precht
Associated Messages, from the most recent to the oldest:
I am just about to buy Wcat 2.1 Mac but now I am not shure if I understandthe WCat manual correctly.In the Wcat preferences, you can specify all commands that you want to beused by anonymous visitors by (Allow Commands).If I want to use an online store like Tea Room, I have to allow commandslike replace, add, search, delete and so on.But now, ANY user can edit ANY record in ANY database used by Wcat on myserver, if he is smart enough to understand the command syntax.Even if he has to find a fitting template to SEE contents, he can do enoughto get me in serious trouble.Because I want to host an online store on my server, and also someconfidential databases which I want to use for online-games (I am usingcontexts there for security reasons), I guess I am in a bit of trouble now.Or am I missing something?RegardsMatthias Precht
Matthias Precht
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
Price Not Appearing (2000)
[include ...] behavior (1997)
creating an index based on first letter of word inspecific field in database (2002)
Overiding the sku (2001)
Max Record length restated as maybe bug (1997)
Signal Raised error (1997)
[SearchString] problem with [search] context (1997)
Need help with emailer- 2 issues (1997)
autosensing lanague selection (1997)
WC2b15 - [HTMLx]...[/HTMLx] problems (1997)
Customizing WebDelivery.html (1998)
URL for Discussion Archive (1997)
Help getting [shownext] to increment (2003)
WebCat: Paying affiliates commissions?? (2000)
chicken / egg::purchase / setheader (2002)
emailer settings and control questions (1997)
[WebDNA] Parallels machine (inspired by Amazon EC2 discussion) (2009)
Time for a hard questions. (1997)
Date Bug (1998)
[AppendFile] problem (WebCat2b13 Mac .acgi) (1997)