Re: hmmm
This WebDNA talk-list message is from 2006
It keeps the original formatting.
numero = 67356
interpreted = N
texte = Jesse Proudman wrote: > > It's a _huge_ security concern. I've confirmed through testing with the "Examples" page that any paired context ([context]something[/context]) can be broken by passing a null value as a URL value. If you use exclusively POST and not GET pages, you may be immune from this behavior (but it depends on your web server, since some will happily pass along URL parameters even to a POST). John -- John Peacock Director of Information Research and Technology Rowman & Littlefield Publishing Group 4501 Forbes Boulevard Suite H Lanham, MD 20706 301-459-3366 x.5010 fax 301-429-5748 ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list
. To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Associated Messages, from the most recent to the oldest:
Jesse Proudman wrote: > > It's a _huge_ security concern. I've confirmed through testing with the "Examples" page that any paired context ([context]something[/context]) can be broken by passing a null value as a URL value. If you use exclusively POST and not GET pages, you may be immune from this behavior (but it depends on your web server, since some will happily pass along URL parameters even to a POST). John -- John Peacock Director of Information Research and Technology Rowman & Littlefield Publishing Group 4501 Forbes Boulevard Suite H Lanham, MD 20706 301-459-3366 x.5010 fax 301-429-5748 ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
John Peacock
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
OT Server capacity (2003)
using showpage and showcart commands (1996)
WebCatalog Technical Reference (1997)
creator code (1997)
New Site Announcement: MusicianStore.com goes live with (1998)
Unable to view next 101-200 (1997)
Forcing price recalculation in shopping cart (1998)
Experience with creating real dynamic solutions?????? (1998)
How to Sort Summ data ? (1997)
Bug Report, maybe (1997)
Emailer setup (1997)
[TEST] - Please Ignore (2000)
Now when I send TeaRoom Order fields it does not post in Invoice. (1997)
[Webcat 2]Next (1997)
[WebDNA] [OT] Talk list (2009)
no [search] with NT (1997)
webcat feature request (1997)
More Shopping Cart Problems (2000)
SiteEdit Pro Update Announcement (1997)
What is WebDNA (1997)