[CTS] Re: GGI runs CGI
- From: John Durham <john.modec@xxxxxxxxxx>
- To: computertalkshop@xxxxxxxxxxxxx
- Date: Mon, 01 Apr 2002 08:44:52 +1200
I've been looking for some information on this, but it's pretty
confusing. It just seems to diverge into a zillion other subjects. I
don't see what attackers could do here (except there are infinite
possibilities with the language). Few of these may have anything to do
with your concerns.
Can you be more specific please?
John Madden wrote:
>
> > I like the argument passing idea and will try it out. I don't quite
> > understand the concern you have about security. People are using the
> > script already, and bypassing some of the filters installed there
> > somehow. In particular, certain casinos seem to have a way of
> getting
> > past both email address and bad word filters, even if the terms they
> use
> > are listed. I'm taking this step to sever the direct link to the
> script
> > so that they can't continue. If the name of the link page script is
> > changed to something they won't recognise, it should take quite a
> > careful analysis of the censor to find out what it is. For that
> reason,
> > I hope they are too busy to do that kind of analysis on one system
> out
> > of countless others.
>
> The problem isn't what the SPAMmers are doing, it's what the attackers
> can
> do. Read the perlsec manpage...
>
> > Would I be right that altering the variables to the form you
> described
> > will make the script accept them only in the form the censor
> provides?
> > If so, it will make compliance much more effective.
>
> Yes... I think... :)
>
> John
--
Regards, John Durham <mailto:modec@xxxxxxxxxxxxxx >
ICQ number 112663246
Fax/Phone 64 4 5286786
Award winning web site at http://modecideas.com?sig
Order my latest e-book at http://modecideas.com/dmaxhits.htm?sig
PC-HELPERS list subscribe/unsub at http://pchelpers.5er.com?sig
Classified ad site
http://www.spunge.org/~johndurh/cgi-bin/classifieds.cgi?sig
Get your free site rotator http://www.ebizrotator.com/goto/JD706.htm
Prosper Mail http://www.prospermail.com/id/17841/free.cfm
Referralware http://www.referralware.com/home.jsp/101728230
Good advice is like good paint- it only works if applied.
---------------------------------------------------------------------------
-----
Computer Talk Shop http://www.computertalkshop.com
Un-subscribe/Vacation, http://questforcertification.com/cts/list_options.htm
List HowTo: http://questforcertification.com/cts/faq
To join Computer Talk Shop's off topic list, please goto:
http://questforcertification.com/cts/other_cts_lists.htm
---------------------------------------------------------------------------
------
Other related posts:
