Ben [EMAIL PROTECTED] wrote:
Hi
I have been using Velocity throughout my site and I am in awe with its
capabilities. However there are situations where I need to restrict
its capabilities to a certain extend.
For example, my site allows users to upload templates and be able to
use a
Hi Ben,
Restricting access is a tricky issue. We have a publically available system
in which hundreds of users upload templates. I've written a few thoughts on
how to have a secure server environment here:
http://wiki.apache.org/jakarta-velocity/BuildingSecureWebApplications
Abusing the