[thelist] ASP - Variables & Security

Mon Aug 4 00:29:23 CDT 2003

Hello all,

Please consider the following code:

  <% Language=VBScript
     Option Explicit

     Dim strVarOne
     Dim strVarTwo
     strVarOne = "this variable has something assigned to it"
  %>
  <html>
    <head>
      <title></title>
    </head>
    <body>
      <%=strVarOne%>
    </body>
  </html>

In this code 2 variables are declared, 1 of which is given a value.
I've read somewhere that if some declared variable are not assigned to
something within a page, that is a POSSIBLE security flaw.

Is this correct?? And can someone please explain it some more.

If this is the case, is it possible to UN-declare a variable.

Thanks
Tim

--------------------------------------------------------------------
mail2web - Check your email from the web at
http://mail2web.com/ .