[Javascript] ssi, layers, table alternative to frames

Andrew Gibson andyg at ihug.co.nz
Mon Apr 14 20:52:56 CDT 2003


I presume if you have some kind of security code in each include it would
help?

<%
if not checkUser() then
  ' kick out
end if
'rest of include %>

> More inherently insecure than unpatched software?  I can't understand how
> SSI is any more dangerous in a controlled environment than any other kind
of
> active content.  <!-- #include virtual="/inc/TooLazyToRetype.htm" -->
> shouldn't be posing much security threat.  http://url/crackers/utility.asp
> would be a far worse thing to have running.  If this is listed as a
drawback
> to using SSI, then i would suggest the administrator just disconnect the
> ethernet from the box or turn it off altogether...
>
> "Just a thought"





More information about the Javascript mailing list