Re[2]: Potential vulnerabilities from user-uploaded HTML code

2002-04-01 Thread Toomas Vendelin
Hello Marty, Thanks for advice. Honestly, I haven't considered this possibility, and now I am thinking why. First, your suggestion presumes that the "other end webmaster" has to have at least an elementary understanding of Unix, permissions, and other command-line stuff which is, true, quite sim

Re[2]: Potential vulnerabilities from user-uploaded HTML code

2002-04-01 Thread Marty Landman
At 02:29 PM 4/1/02 +0200, Toomas Vendelin wrote: >First, your suggestion presumes that the "other end webmaster" has to >have at least an elementary understanding of Unix, permissions, and >other command-line stuff which is, true, quite simple, but can make a >FrontPage >weekend user hystericall

Re: Potential vulnerabilities from user-uploaded HTML code

2002-03-31 Thread Marty Landman
At 07:46 PM 3/31/02 +, you wrote: >I am writing a discussion board which can be used by several sites and which >is backed with one and the same database. To make it look at each of >participating >site like this site's discussion board, I have to allow site owners to upload >HTML header and

Potential vulnerabilities from user-uploaded HTML code

2002-03-31 Thread Toomas Vendelin
Hello List, I am writing a discussion board which can be used by several sites and which is backed with one and the same database. To make it look at each of participating site like this site's discussion board, I have to allow site owners to upload HTML header and footer which contain their basi