Re: Execute Applescript
This WebDNA talk-list message is from 1997
It keeps the original formatting.
numero = 10731
interpreted = N
texte = >>If we use WebCat2 to build a guestbook or anything that use>>database, dybamic data publishing, would it be possible for>>someone just type in the [applescript] [/applescript] tag>>and execute an Applescript on the server side?>We are considering a global preference thay disables the tag entirely.I think this is a very good idea! :)>Typing WebDNA tags into a database field: when database fields are>displayed on a page, they are not executed as WebDNA. So no one can>type some WebDNA [AppleScript] tags into your guestbook and have them>executed by simply viewing the guestbook. Yes, by surrounding the>[fieldname] with [Interpret]..[/Interpret] tags you can have the WebDNA>executed, but again you control whether or not that is put in the>template.Question: If I set my WebCat Prefs to InterpretAll=T, does this eliminatemy need to place all those [Interpret]..[/Interpret] tags into my HTML ...or does the InterpretAll=T preference only deal with the [tags] it finds onfiles without a .tmpl suffix or without a tag?Sincerely,Ken
Associated Messages, from the most recent to the oldest:
>>If we use WebCat2 to build a guestbook or anything that use>>database, dybamic data publishing, would it be possible for>>someone just type in the [applescript] [/applescript] tag>>and execute an Applescript on the server side?>We are considering a global preference thay disables the tag entirely.I think this is a very good idea! :)>Typing WebDNA tags into a database field: when database fields are>displayed on a page, they are not executed as WebDNA. So no one can>type some WebDNA [AppleScript] tags into your guestbook and have them>executed by simply viewing the guestbook. Yes, by surrounding the>[fieldname] with
[interpret]..[/Interpret] tags you can have the WebDNA>executed, but again you control whether or not that is put in the>template.Question: If I set my WebCat Prefs to InterpretAll=T, does this eliminatemy need to place all those
[interpret]..[/Interpret] tags into my HTML ...or does the InterpretAll=T preference only deal with the [tags] it finds onfiles without a .tmpl suffix or without a tag?Sincerely,Ken
Kenneth Grome
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
Custom WebCat Prefs ... (1997)
TCP Connect code for SMTP transaction (2004)
WebCat2 - [format thousands] (1997)
Server IP address? (1998)
WebCatalog/Mac 2.1b2 New Features (1997)
Single Link browsing (1997)
FRAMES and CART tags problem??!? (1999)
OT: anyone know how to prevent image hijacking with Apache? (2002)
Hiding HTML and page breaks (1997)
Slightly OT web* and Web Cat crashes (2000)
Variables from a long text string (2000)
Multiple Merchant Accounts? (1997)
[WebDNA] [arrayset name=array_1&dim=X,Y,Z] Margins (2012)
Search Title Question (1998)
Country & Ship-to address & other fields ? (1997)
Summing fields (1997)
[WebDNA] Paypal Sandbox TCPConnect (2012)
[HIDEIF] inside [FOUNDITEM] (1997)
Re:2nd WebCatalog2 Feature Request (1996)
Thanks for tips, more quest (1997)