Open Source Zealots Dowplay Danger Of Perl Flaw On ZDNet Talkbacks

TalkBack 17 of 30:

Next »

« Previous

• Thread View
• Flat View

Maybe tough but not impossible

Prepared statements would help, as would using data access objects which encapsulate and shield all database logic from the developer and the application.

All I'm saying is, there are ways to do enterprise-class computing for the web securely. What definitely not to do is exposing your scripts to the internet, or exposing your webserver to the internet at all. (If you don't understand this, you're probably in the category of the woefully uneducated about basic programming techniques and need to do some studying on network topologies and architectural frameworks and get up to speed with the more advanced programming techniques....)

A setup as you are describing is not used in enterprises. Exposing your cgi-bin to the internet is a very well-known security risk and hosting providers should be aware of these and take measures. Smuggling in code through a clever hack in format strings is still pretty impressive but most of the security holes you mention are well known and dealt with in enterprises.

Many webapps aren't thoroughly tested because of time and money issues. In enterprises this is mandatory.

Besides, who uses Webmin over the internet? I'ld never do that. Only over an intranet or VPN. Just to be on the safe side.

Really, enterprise security is rather good. You wouldn't believe how many hoops you're going through before you're click on a webpage is executed by, say, an airline reservation system or a banking transaction system. There's a reason why these systems generally tend to be slow and expensive.

Posted by: rein8   Posted on: 12/01/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Trend Micro Message Archiver Trend Micro Easy compliance, e-discovery, and email management. Take a tour today of ... Download Now
• Email Archiving in the SMB Trend Micro Addressing Enterprise Needs with Fewer Resources A discussion of SMB ... Download Now
• IBM Smart Business Time Savings Test IBM If time is money - is your organization in need of a way to save both? ... Download Now