On 5/20/02 3:45 PM, "Jeff Duska" <[EMAIL PROTECTED]> wrote:
> Geir Magnusson Jr. wrote:
>
>> Tool loading like this can be dangerous depending on what can be specified
>> for the load.
>>
> If I understand, you correctly -- we are protecting the template
> developer by limiting the access they have. So, they don't or can't do
> something stupid like request 1,000,000 row result from a database.
> Gosh, this is so different from the Microsoft ASP world I'm comming
> from. In the Microsoft world, not only is this something you can do
> typically it is encourgaed by Microsoft in the MSDN examples. ;-)
That's it. So no
$dbtool.execute("DROP DATABASE ACCOUNTING");
:)
>
>> That said, I don't trust the controller author either, so I limit the tools
>> available :)
>>
> Sound like you have some trust issues ;) (Just kiddin')
Yes, especially since I write the controllers, I know who the audience is.
[SNIP]
>
>> VVS and Turbine aren't comparable. VVS isn't an application framework
>> (although you could build one around it). VVS was originally meant to be a
>> rendering servlet a la JSPServlet, so we could have a view system that could
>> be added to JSP-centric frameworks like Struts.
>>
>> Turbine is an application framework, with all the support one might expect.
>> It is a competitor to Struts.
>>
> I think you misunderstood me here. The impression I got from Jon's email
> was that there was a portion of this work already done in Turbine. He
> may have been talking about Bill's tool, I'm not sure. I understand that
> the goal is keep VVS application framework independant, which is
> something I like. I was just saying if there is any code we can reuse --
> then lets look at it. If there isn't no big deal. As I said, I really
> lazy... ;)
Me too.
--
Geir Magnusson Jr.
Research & Development, Adeptra Inc.
[EMAIL PROTECTED]
+1-203-247-1713
--
To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
