[thelist] CF: Determining which DB used.
Raymond Camden
jedimaster at macromedia.com
Wed Sep 12 11:27:30 CDT 2001
> ><><><><><><><><><><><><><><><><><><><><><><><><><><><><><
> > From: Raymond Camden
> >
> > Security reasons. That's the official reason.
> ><><><><><><><><><><><><><><><><><><><><><><><><><><><><><
>
> bah. i can query the information directly by hand typing in
> these variables with dots in them. unless there is
> additional, undocumented variables that would be exposed by
> the server scope being a structure, i see no security risk.
> power to the developer, right?
I should have been more precise. The 'default' Server values are not
hidden per se. They are in the docs. I was replying more to "Why can't I
use Server like a Struct". The answer is, that if you could, it could be
a potential security risk, not because of the data in the default server
vars, but because of other data, for example, maybe you are at an ISP.
Now, that being said, I agree w/ you 100% that it's not a valid
reason... however, it's not a big deal if you just use a substruct
under Server.
> ><><><><><><><><><><><><><><><><><><><><><><><><><><><><><
> > Personally, I don't agree that it's a good idea, but,
> > what do you do.
> ><><><><><><><><><><><><><><><><><><><><><><><><><><><><><
>
> send an email to wish-coldfusion at macromedia.com i guess.
Well, I'm pushing for it myself internally, but of course, I'm too low
on the totem pole to make such decisions. ;)
> ><><><><><><><><><><><><><><><><><><><><><><><><><><><><><
> > If you want to use the Server scope for your app, I
> > suggest doing Server.App instead of just Server, that
> > way you can examine the structure w/ StructKeyList, etc.
> ><><><><><><><><><><><><><><><><><><><><><><><><><><><><><
>
> i see no indication that server.app exists. are you
> suggesting reconstructing the dotted variables into your own
> structure (which also has a dot in the variable name, tsk
> tsk)? if being able to walk the collection is important to
> the functioning of an app, then i agree that recreating the
> information as a true structure of structures would be the best route.
No, what I meant was:
<CFSET Server.MyApp = StructNew()>
Then put your crap in there.
-Ray
More information about the thelist
mailing list