Re: where to put code
This WebDNA talk-list message is from 1998
It keeps the original formatting.
numero = 19326
interpreted = N
texte = >I personally prefer to use the context method on resulting pages. There I >can see the code at once, which makes it easier to understand. Anyway - I >do not like these long ugly URL's... And if one uses Replace or Delete >in a link, then this command has to be allowed for user input and therefore >some funny guy can destroy the database by simply playing with the URL. >There can be situation when commands in th URL make sense, but my personal >recommendation is to use contexts like [search...] on the target page >whenever you can.I agree. I do so myself. I have gone so far as disabling ALL URL commands except for ShowPage, and added a WebStar Realm with a .db match string for even more security.Of course that this has forced me to change a lot of code in the General Store, but I feel much safer this way...Now, if I could only disable certain commands, like [AppleScript], I would be happier still.Charles_______________________________________________________________ Institut Balear de Comunicacions, S.L. Gremio Tejedores 22, 1 07009 Palma de Mallorca, Spain _____________________________________________ Tel: +34 971.43.12.77 Fax: +34 971.43.08.18 E-mail: ckefauver@ibacom.es URL: http://www.ibacom.es/ _____________________________________________ Public PGP signature (Clave publica PGP): http://www.ibacom.es/PGP/kefauver.txt _______________________________________________________________
Associated Messages, from the most recent to the oldest:
>I personally prefer to use the context method on resulting pages. There I >can see the code at once, which makes it easier to understand. Anyway - I >do not like these long ugly URL's... And if one uses Replace or Delete >in a link, then this command has to be allowed for user input and therefore >some funny guy can destroy the database by simply playing with the URL. >There can be situation when commands in th URL make sense, but my personal >recommendation is to use contexts like [search...] on the target page >whenever you can.I agree. I do so myself. I have gone so far as disabling ALL URL commands except for ShowPage, and added a WebStar Realm with a .db match string for even more security.Of course that this has forced me to change a lot of code in the General Store, but I feel much safer this way...Now, if I could only disable certain commands, like [AppleScript], I would be happier still.Charles_______________________________________________________________ Institut Balear de Comunicacions, S.L. Gremio Tejedores 22, 1 07009 Palma de Mallorca, Spain _____________________________________________ Tel: +34 971.43.12.77 Fax: +34 971.43.08.18 E-mail: ckefauver@ibacom.es URL: http://www.ibacom.es/ _____________________________________________ Public PGP signature (Clave publica PGP): http://www.ibacom.es/PGP/kefauver.txt _______________________________________________________________
Charles Kefauver
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
SV: Mass Mail (2000)
Upgrading old WebCat Database Files (1997)
RAM variables (1997)
[WebDNA] Is the AutoCommit preference still supported? (2010)
[WebDNA] New Years Wish... WebDNA (2009)
filemaker - orderfile (1997)
Browser Problem?!? NN 4.0+ and Browser Info.txt? (1997)
Stumpted Again (1997)
Putting a page between checkout and invoice (1999)
addlineitems (2003)
[showif] problem (1999)
WebCat2: multiple currency support (1997)
Problem: 3.0 doesn't update carts (1997)
[Listfiles] vs Netfinder (1997)
WebCat editing, SiteGuard WAS:SiteAssociative lookup style? (1997)
RE: shrink-wrapped version out yet? (1997)
[BULK] Fwd: [WebDNA] [BULK] WebDNA discovery in the Console - [having many crashes] (2011)
WebCat cannot handle compatible search parameters? (1997)
[WebDNA] Convert Carriage Return From DB to Plain Text File (2019)
Practice runs ? (1997)