Re: WebCatalog security on NT
This WebDNA talk-list message is from 2000
It keeps the original formatting.
numero = 27183
interpreted = N
texte = >Hi, > >I would like to suggest a customer to offer webcat, on their NT web >hosting systems. > >I have seen some posts from Ken, and I know that is the case on a >Mac, that somebody with upload capabilities, could possibly cause *a >lot* of trouble, deleting files, running applescripts, messing with >the TCPSend command, and so on > >The customer offers web hosting services, with virtual domains, on an NT box. > >Can webcat be told to run only in certain folders?No, that's the major problem preventing it from being a secure hosting tool. Webcat on NT can run DOS commands/scripts, so nothing is safe on NT, just like nothing is safe on Macintosh. Even without AppleScript/DOS contexts, webcat's ability to navigate the folder hierarchy with its standard features puts other sites in danger of being hacked quite easily.================================ Kenneth Grome, WebDNA Consultant 808-737-6499, http://webdna.net ================================------------------------------------------------------------- Brought to you by CommuniGate Pro - The Buzz Word Compliant Messaging Server. To end your Mail problems go to
.This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to
Associated Messages, from the most recent to the oldest:
>Hi, > >I would like to suggest a customer to offer webcat, on their NT web >hosting systems. > >I have seen some posts from Ken, and I know that is the case on a >Mac, that somebody with upload capabilities, could possibly cause *a >lot* of trouble, deleting files, running applescripts, messing with >the TCPSend command, and so on > >The customer offers web hosting services, with virtual domains, on an NT box. > >Can webcat be told to run only in certain folders?No, that's the major problem preventing it from being a secure hosting tool. Webcat on NT can run DOS commands/scripts, so nothing is safe on NT, just like nothing is safe on Macintosh. Even without AppleScript/DOS contexts, webcat's ability to navigate the folder hierarchy with its standard features puts other sites in danger of being hacked quite easily.================================ Kenneth Grome, WebDNA Consultant 808-737-6499, http://webdna.net ================================------------------------------------------------------------- Brought to you by CommuniGate Pro - The Buzz Word Compliant Messaging Server. To end your Mail problems go to .This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to
Kenneth Grome
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
WC 2.0 frames feature (1997)
Multiple Ad databases? (1997)
Show if time tags (1997)
Ranking search results (2002)
The code, one more time. (2003)
Anyone Using 4DMail (2004)
multi-paragraph fields (1997)
WebCat2b15MacPlugin - showing [math] (1997)
RE: WebCatalog2 for NT Beta Request (1997)
suggestion (1997)
RE: protect tag on NT (1997)
Cart Number Propagation (1997)
Type 11 errors setting up WebCAt 2 (1997)
Users.db (1998)
database with 10,000+ web pages stored in it? (2000)
Languages (1997)
WebCat2 - many [carts] on one template page? (1997)
Multiple prices (1997)
WebCat2b13MacPlugIn - [include] doesn't allow creator (1997)
A multi-processor savvy WebCatalog? (1997)