Re: [TEXT SECURE=T]
This WebDNA talk-list message is from 2000
It keeps the original formatting.
numero = 32039
interpreted = N
texte = Any time a security problem comes to light, all bets are off as to where the change needs to be made. There have been plenty of security problems with ColdFusion, ASP, and even Perl that required edits of user source to fix. There is also no use arguing; Grant has made very clear that they will not ship the program without Secure=T as the default. There is no one requiring you to upgrade to 4.0 if you cannot change your templates. There is also every reason to suspect that many, if not most templates will require no changes at all. It is only if you used the specific technique of relying on command line variables overriding text variables that anything needs to be changed in the first place.And it is extremely unlikely that any ResEdit change could be made to flip the security, since the change alters the very nature of the parse tree.John PeacockAlex McCombie wrote: > > on 5/18/00 2:12 PM, John Peacock at JPeacock@UnivPress.com wrote: > > > This is a security fix, not an upgrade. Secure=T is the only default > > that makes sense. Anyone with a reasonable editor can quickly update > > all of their sites in minutes. SM is not jilting customers; they are > > fixing a very significant security problem. > > > > John Peacock > Since a security fix often involves changed to the code set of an app and > not the forced change of potentially hundreds of files by the actual > customers... > > and since I know many users have purchased encrypted pages that they cannot > fix themselves... > > and since some providers have other clients using WebDNA on their own > collocated sites and thus will end up in support 'heaven'... > > how about this... > > anyone finding through unofficial means a ResEdit change or resource editor > or should SM decide to add this default setting of secure=T to their > preference files (hint hint), I would certainly like to know of that > information because I would not hesitate to change it's usage if it served > me better that way. > > ...... > > -- > Alex J. McCombie (800-724-8973) > http://OurClients.com Corporate > http://McCombie.com Personal (Alex@McCombie.com) > > http://ClubGab.com/ > <--- Now here's a serious Chat Room! --->############################################################# This message is sent to you because you are subscribed to the mailing list
. To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to To switch to the INDEX mode, E-mail to Send administrative queries to
Associated Messages, from the most recent to the oldest:
Any time a security problem comes to light, all bets are off as to where the change needs to be made. There have been plenty of security problems with ColdFusion, ASP, and even Perl that required edits of user source to fix. There is also no use arguing; Grant has made very clear that they will not ship the program without Secure=T as the default. There is no one requiring you to upgrade to 4.0 if you cannot change your templates. There is also every reason to suspect that many, if not most templates will require no changes at all. It is only if you used the specific technique of relying on command line variables overriding text variables that anything needs to be changed in the first place.And it is extremely unlikely that any ResEdit change could be made to flip the security, since the change alters the very nature of the parse tree.John PeacockAlex McCombie wrote: > > on 5/18/00 2:12 PM, John Peacock at JPeacock@UnivPress.com wrote: > > > This is a security fix, not an upgrade. Secure=T is the only default > > that makes sense. Anyone with a reasonable editor can quickly update > > all of their sites in minutes. SM is not jilting customers; they are > > fixing a very significant security problem. > > > > John Peacock > Since a security fix often involves changed to the code set of an app and > not the forced change of potentially hundreds of files by the actual > customers... > > and since I know many users have purchased encrypted pages that they cannot > fix themselves... > > and since some providers have other clients using WebDNA on their own > collocated sites and thus will end up in support 'heaven'... > > how about this... > > anyone finding through unofficial means a ResEdit change or resource editor > or should SM decide to add this default setting of secure=T to their > preference files (hint hint), I would certainly like to know of that > information because I would not hesitate to change it's usage if it served > me better that way. > > ...... > > -- > Alex J. McCombie (800-724-8973) > http://OurClients.com Corporate > http://McCombie.com Personal (Alex@McCombie.com) > > http://ClubGab.com/ > <--- Now here's a serious Chat Room! --->############################################################# This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to To switch to the INDEX mode, E-mail to Send administrative queries to
John Peacock
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
2.1b3 --> way slow (1997)
Carrying over data? (1997)
Converting SQL Microtime to Date and Time (2003)
using bw in a search on a numeric field (2000)
Listserver problem (1997)
Multiple edits/replacementsd to db. Possible? (1997)
restarting service remotely on NT (1997)
Template not found error messages (1997)
Do the [date] thing... (2001)
WebCat2b15MacPlugIn - [authenticate] not [protect] (1997)
emailer (1997)
WebCat2b13MacPlugin - [math][date][/math] problem (1997)
searchable list archive (1997)
form data submission gets truncated (1997)
Associative lookup style? (1997)
Emailer (1997)
[replaceChars] would be nice ... (1997)
RE: Is there a 'does not contain' comparison? (1999)
no? marks in the links (2003)
WebCat2b13MacPlugIn - [include] doesn't allow creator (1997)