> I thought I had seen here or elsewhere that cfexecute wasn't
> secure or stable.. can't remember... but I would like the
> contents to be in a variable rather than a file so that I won't
> have to go to the disk... but perhaps it will be a temporary
> solution.
>
> Have you heard anything negative about the tag?
CFEXECUTE, given that it allows CF to execute arbitrary commands at the
console, isn't very secure. Neither is CFFILE, or CFREGISTRY, or CFOBJECT
(which is what you'd have to use if you were using a COM object). However,
as long as your applications aren't compromised, and no one is able to
create and execute malicious CFML scripts, you've got nothing to worry about
with any of these tags.
Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444
------------------------------------------------------------------------------
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.
