Re: WebCatalog 4.0 has been released!
This WebDNA talk-list message is from 2000
It keeps the original formatting.
numero = 32824
interpreted = N
texte = on 6/7/2000 9:53 AM, Paul Uttermohlen at paul@columbusrealestate.com wrote:> Now, I'm convinced that I'll need to use the secret preference to > be assured that old sites will continue to function properly. How big > of security problem is this if I turn OFF the new default setting? > > Thanks, Paul That's a good question. I also believe that the cure is worse than the disease here. There are a slew of things that someone would have to do, and know, in order take advantage of this and even if they did the value would be completely dependant upon what form they were trying to circumvent and what it's purpose was. I personally intend to change that preference immediately upon installing 4.x and most likely leaving it that way. BTW, I have seen numerous references to this being undocumented and therefor not necessarily supported. The harsh reality is that while it was undocumented in the manual, the manual was severely lacking anyway in numerous areas. It was also discussed at great length on the support list in front of everyone, including SM. The good news is that SM heard the cry to include this in the prefs so that it could be changed but opted to rely on word of mouth(email) as to how to use it. This will likely ensure that there will be NUMEROUS emails on the forum regarding it as people work through it.:-( Alex -- Alex J. McCombie (800-724-8973) http://OurClients.com Corporate http://McCombie.com Personal (Alex@McCombie.com) http://ClubGab.com/ <--- Now here's a serious Chat Room! --->------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list
. To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://search.smithmicro.com/
Associated Messages, from the most recent to the oldest:
on 6/7/2000 9:53 AM, Paul Uttermohlen at paul@columbusrealestate.com wrote:> Now, I'm convinced that I'll need to use the secret preference to > be assured that old sites will continue to function properly. How big > of security problem is this if I turn OFF the new default setting? > > Thanks, Paul That's a good question. I also believe that the cure is worse than the disease here. There are a slew of things that someone would have to do, and know, in order take advantage of this and even if they did the value would be completely dependant upon what form they were trying to circumvent and what it's purpose was. I personally intend to change that preference immediately upon installing 4.x and most likely leaving it that way. BTW, I have seen numerous references to this being undocumented and therefor not necessarily supported. The harsh reality is that while it was undocumented in the manual, the manual was severely lacking anyway in numerous areas. It was also discussed at great length on the support list in front of everyone, including SM. The good news is that SM heard the cry to include this in the prefs so that it could be changed but opted to rely on word of mouth(email) as to how to use it. This will likely ensure that there will be NUMEROUS emails on the forum regarding it as people work through it.:-( Alex -- Alex J. McCombie (800-724-8973) http://OurClients.com Corporate http://McCombie.com Personal (Alex@McCombie.com) http://ClubGab.com/ <--- Now here's a serious Chat Room! --->------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://search.smithmicro.com/
Alex McCombie
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
WebCat2b13MacPlugIn - [showif][search][/showif] (1997)
Invisible file issue now a real 'bug' (1999)
Caching [include] files ... (1997)
how to check for no value while using [URL] to prevent cr (1999)
Warning: Mac OS X 10.2.4 Update Overwrites Apache'shttpd.con (2003)
WebCommerce: Folder organization ? (1997)
Re:listfiles-looking for slick solution (1997)
Emailer (1997)
[carts] and databases (1997)
Generating Report Totals (1997)
Re1000001: Setting up shop (1997)
WebTen and WebCat (1997)
RE: [WebDNA] .htm files (2008)
shell problems again... (2003)
[isfile] ? (1997)
[WebDNA] HTML5 (2010)
[WebDNA] Authentication across domains (2009)
Who is doing sign-ups-got it (1998)
problems with 2 tags (1997)
[Announce]: Web server security and password protection (1997)