TallyList : mailing list management, archiving, and analysis

Archive of:
Fusebox
Cold Fusion Fuse Box List

home
24 hour view
quick stats
weekly updates

all tallylists
corporate solutions
archive your favorite
help / feedback

About CF Fusebox Methods :
product's home
product's list home

Archived TallyList / Fusebox:
Subject: RE: Managing program flow

BORKMAN Lee (83p/+0r) Posted: Sunday 06 May 2001
This post: 62 views, +0 rating

Yes, but you can possibly live with hidden fields as long as you always check for a trusted referer.

-----Original Message----- From: amittalwar@intellikaps.com [mailto:amittalwar@intellikaps.com]

Hi, Well Erik It is Absoloutely going cause security hazards if you are using hidden varables in your page.

Conside this, for example you store price of a product as a hidden variable. Now if the users saves the page to his system and reduces the price and then submits the page you will never know that the price is correct or incorrect as there will be no cross check with the price in the database.

IMPORTANT NOTICE: This e-mail and any attachment to it is intended only to be read or used by the named addressee. It is confidential and may contain legally privileged information. No confidentiality or privilege is waived or lost by any mistaken transmission to you. If you receive this e-mail in error, please immediately delete it from your system and notify the sender. You must not disclose, copy or use any part of this e-mail if you are not the intended recipient. The RTA is not responsible for any unauthorised alterations to this e-mail or attachment to it.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/fusebox@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Similar Subject Line Posts (+/- two weeks of this post)

RE: Managing program flow	07 May 2001	(58 v/ +0 r)
RE: Managing program flow	07 May 2001	(62 v/ +0 r)
RE: Managing program flow	07 May 2001	(54 v/ +0 r)
RE: Managing program flow	07 May 2001	(58 v/ +0 r)
RE: Managing program flow	07 May 2001	(60 v/ +0 r)
RE: Managing program flow	07 May 2001	(57 v/ +0 r)
RE: Managing program flow	07 May 2001	(64 v/ +0 r)
RE: Managing program flow	07 May 2001	(51 v/ +0 r)
RE: Managing program flow	07 May 2001	(48 v/ +0 r)
RE: Managing program flow	06 May 2001	(55 v/ +0 r)
RE: Managing program flow	06 May 2001 (this post)	(62 v/ +0 r)
RE: Managing program flow	06 May 2001	(59 v/ +0 r)
Re: Managing program flow	06 May 2001	(56 v/ +0 r)
RE: Managing program flow	05 May 2001	(47 v/ +0 r)
RE: Managing program flow	04 May 2001	(58 v/ +0 r)
RE: Managing program flow	04 May 2001	(60 v/ +0 r)
RE: Managing program flow	04 May 2001	(55 v/ +0 r)
Re: Managing program flow	04 May 2001	(56 v/ +0 r)
RE: Saving form variables in WDDX (Was: Managing program flow)	04 May 2001	(52 v/ +0 r)
RE: Saving form variables in WDDX (Was: Managing program flow)	04 May 2001	(46 v/ +0 r)
Saving form variables in WDDX (Was: Managing program flow)	04 May 2001	(51 v/ +0 r)
Re: Managing program flow	03 May 2001	(54 v/ +0 r)
Re: Managing program flow	03 May 2001	(54 v/ +0 r)
Re: Managing program flow	03 May 2001	(70 v/ +0 r)
RE: RE: Managing program flow	03 May 2001	(52 v/ +0 r)

Send a reply to the Fusebox list!
	NOTE: Many lists will reject your post unless you have already registered with them. Also - don't forget the right account to send from (for those with multiple emails!)