Another way is to secure the dangerous verbs per an answernet document from Datatel.  
I'm sorry but I do not have the number but it's easily searchable.

---------------------------------------
Original Email
From: Ian Renfrew <[EMAIL PROTECTED]>
Sent: Apr 22, 2004 08:26 AM
To: U2 Users Discussion List <[EMAIL PROTECTED]>
Subject: Re: Wintegrate 5.1 Query Builder

One ways is to remove the before / after fields and associated code, if any
from the scripts.

Regards,  Ian Renfrew


----- Original Message ----- 
From: "Steven Frost" <[EMAIL PROTECTED]>
To: "U2 Users (E-mail)" <[EMAIL PROTECTED]>
Sent: Wednesday, April 21, 2004 7:46 PM
Subject: Wintegrate 5.1 Query Builder


Hi -- any way to disable users from using the Before and After fields at the
bottom of the form.
This can be used to enter DELETE,MODIFY, even CLEAR-FILE statements, and
opens the database
wide open to any sort of abuse , intentional or otherwise.
Also , any other field in the form can be used to enter similar statements.
Any comments?
Thanks.



Steven Frost

POWERCO
35 Junction Street
Private Bag 2004
New Plymouth
New Zealand

Helpdesk  0800491491
DDI:      +64 6 759 6583
Fax:      +64 6 759 6253
Mob:      +64 274 403940
Email:    [EMAIL PROTECTED]
Web:      www.powerco.co.nz


############################################################################
#########
This e-mail message has been scanned for Viruses and Content and cleared
by MailMarshal
############################################################################
#########

****************************************************************************
************************************************
CAUTION: This email and any attachments may contain information that is
confidential.  If you are not the intended recipient, you must not read,
copy, distribute, disclose or use this email or any attachments.  If you
have received this email in error, please notify us and erase this email and
any attachments.  You must scan this email and any attachments for viruses.
DISCLAIMER: Powerco Limited accepts no liability for any loss, damage or
other consequences, whether caused by its negligence or not, resulting
directly or indirectly from the use of this email or attachments or for any
changes made to this email and any attachments after sending by Powerco
Limited.  The opinions expressed in this email and any attachments are not
necessarily those of Powerco Limited.

****************************************************************************
************************************************
-- 
u2-users mailing list
[EMAIL PROTECTED]
http://www.oliver.com/mailman/listinfo/u2-users

-- 
u2-users mailing list
[EMAIL PROTECTED]
http://www.oliver.com/mailman/listinfo/u2-users



-- 
u2-users mailing list
[EMAIL PROTECTED]
http://www.oliver.com/mailman/listinfo/u2-users

Reply via email to