Interchange Developer Resource
[Date Prev][Date Next][Thread Prev][Thread Next][Interchange by date ][Interchange by thread ]

[ic] Re: [include pages/[mv_arg] ]



> You should be more security aware !! The user can view any file
> in your catalog tree with the above code, e.g
> mv_arg=../products/access.asc

True, I did not think of that. But luckily this variable is not viewable in
the URL, because I use it in a redirecting actionmap (and the variable is
named something else as in my question :)

This is also a temporary solution. I had to find out a fast way in
converting an old site into a "Powered by Interchange" site. Later on I'll
add that included-stuff into a db.





Search for: Sort by: