filePro and rapid developement

Fairlight fairlite at fairlite.com
Tue Jul 5 09:25:31 PDT 2005


Is it just me, or did GCC say:
> I think there are Howie and Mark feel their Web enabling tools for
> filePro can make for a secure web application.  As far as the internal
> security, that is incumbent on the IT people of the company.  That may be
> "you" who has to set up the security levels.

Actually, while OneGate handles everything -it- can as far as security, the
onus is still on the developer doing the filePro (or whatever...it works
with anything) side to make sure they don't violate any of the CGi security
tenets.  You can only go so far without writing -all- the code.  There are
plenty of ways to shoot yourself in the foot in security if you aren't
familiar with coding for the CGI environment, no matter whose engine you
choose to use.

The trick is to pick the most secure and feature-rich engine, since the
rest is more or less the same anyway.

> As for Fortune 500 companies, you can't hold them up as examples of
> secure systems.  Just look at how many times their systems have been
> hacked and personal data has been stolen.  I haven't read or heard about

Did I ever mention the -bank- with their own IT -subsidiary- that had
their trees of 0777's and the 'bin' user with no password on the AT&T SVR3
system?

mark->
-- 
          *****   Fairlight Consulting's Software Solutions   *****
OneGate Universal CGI Gateway:                  http://onegate.fairlite.com/
FairPay PayPal Integration Kit:                 http://fairpay.fairlite.com/
RawQuery B2B HTTP[S] Client & CGI Debugger:     http://rawquery.fairlite.com/
Lightmail Mail Sending Agent:                   http://lightmail.fairlite.com/
FairView Image Viewer for Integration:          http://fairview.fairlite.com/


More information about the Filepro-list mailing list