Re: [cgiapp] LinkIntegrity vs ValidateQuery plugin?

2009-04-17 Thread Ron Savage
Hi Mark On Tue, 2009-04-14 at 22:59 -0700, Mark Fuller wrote: On Tue, Apr 14, 2009 at 8:16 AM, Mark Stosberg m...@summersault.com wrote: However, only validation can check if in fact I have all parameters I need in the right format. That protects against the case where my application

Re: [cgiapp] LinkIntegrity vs ValidateQuery plugin?

2009-04-16 Thread Ron Savage
Hi Mark On Tue, 2009-04-14 at 11:16 -0400, Mark Stosberg wrote: However, only validation can check if in fact I have all parameters I need in the right format. That protects against the case where my application generates a link with a valid checksum, but somehow has the wrong data in it. If

Re: [cgiapp] LinkIntegrity vs ValidateQuery plugin?

2009-04-16 Thread Mark Fuller
On Tue, Apr 14, 2009 at 8:16 AM, Mark Stosberg m...@summersault.com wrote: However, only validation can check if in fact I have all parameters I need in the right format. That protects against the case where my application generates a link with a valid checksum, but somehow has the wrong data

Re: [cgiapp] LinkIntegrity vs ValidateQuery plugin?

2009-04-16 Thread Michael Peters
Mark Stosberg wrote: Anyone here using LinkIntegrity? How are you doing lightweight query validation? To be honest, I don't do lightweight query validation. For projects that I work on I normally just have 1 validation framework (based on D::FV) and any place that's important enough to

[cgiapp] LinkIntegrity vs ValidateQuery plugin?

2009-04-14 Thread Mark Stosberg
As I considered this problem space further, I'm wondering if I should be following the approach of the LinkIntegrity plugin instead. It adds a checksum to internal application links, which allows tampering to be detected: