> On Nov 9, 2016, at 1:58 PM, Mike McCall <[email protected]> wrote:
> 
> In a compiled application it works fine as well unless someone were to 
> maliciously or somehow inadvertently submit a web page with a field name 
> which was not defined in our application. In brief if they modified an html 
> form to submit to our application and added a non-existent field, then a 
> -20010 error - Bad usage of pointer or pointer to an unknown variable message 
> would be generated and the connection would hang until we clicked OK on the 
> message on the server.
> 
> Is there any way we could avoid this from happening? We were hopeful that 
> using "undefined" would help but that doesn't work in a compiled database. 

Why not use an error handler to catch the error and abort processing of the 
form?

John DeSoi, Ph.D.

**********************************************************************
4D Internet Users Group (4D iNUG)
FAQ:  http://lists.4d.com/faqnug.html
Archive:  http://lists.4d.com/archives.html
Options: http://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:[email protected]
**********************************************************************

Reply via email to