Open Source Zealots Dowplay Danger Of Perl Flaw On ZDNet Talkbacks

TalkBack 16 of 30:

Next »

« Previous

• Thread View
• Flat View

Maybe tough but not impossible

Prepared statements would help, as would using data access objects which encapsulate and shield all database logic from the developer and the application.

All I'm saying is, there are ways to do enterprise-class computing for the web securely. What definitely not to do is exposing your scripts to the internet, or exposing your webserver to the internet at all. (If you don't understand this, you're probably in the category of the woefully uneducated about basic programming techniques and need to do some studying on network topologies and architectural frameworks and get up to speed with the more advanced programming techniques....)

A setup as you are describing is not used in enterprises. Exposing your cgi-bin to the internet is a very well-known security risk and hosting providers should be aware of these and take measures. Smuggling in code through a clever hack in format strings is still pretty impressive but most of the security holes you mention are well known and dealt with in enterprises.

Many webapps aren't thoroughly tested because of time and money issues. In enterprises this is mandatory.

Besides, who uses Webmin over the internet? I'ld never do that. Only over an intranet or VPN. Just to be on the safe side.

Really, enterprise security is rather good. You wouldn't believe how many hoops you're going through before you're click on a webpage is executed by, say, an airline reservation system or a banking transaction system. There's a reason why these systems generally tend to be slow and expensive.

Posted by: rein8   Posted on: 12/01/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now
• The Impact of Virtualization Software on Operating Environments VMware Today's use of virtualization technology allows IT professionals to ... Download Now
• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now