But won't that create a new app name with every request? -----Original Message----- From: Matt Robertson [mailto:[EMAIL PROTECTED] Sent: Friday, April 22, 2005 2:16 PM To: CF-Talk Subject: Re: CrystalTech Users Beware
On 4/22/05, Connie DeCinko <[EMAIL PROTECTED]> wrote: > Right, but... What if you chose a common name Don't do that :-). As you've just discovered it creates a security weakness. I use variables.AppName="somename_" & variables.myDSNName & "_" & TimeFormat(CreateODBCTime(Now()),"HHmmss"); The above is part of an installer that writes an /Application.cfm to disk as part of the install routine. I've also used UUIDs for this, but for the most part just appending the date and time to your application name is sufficient. I have my own servers but still I do a datasource similarly. somename (not necessarily the url) & date+time. -- --mattRobertson-- Janitor, MSB Web Systems mysecretbase.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Logware (www.logware.us): a new and convenient web-based time tracking application. Start tracking and documenting hours spent on a project or with a client with Logware today. Try it for free with a 15 day trial account. http://www.houseoffusion.com/banners/view.cfm?bannerid=67 Message: http://www.houseoffusion.com/lists.cfm/link=i:4:204082 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
