RE: How to secure my Application Builder Pages (APB)

The webdriver driven apps, we don't use APB, rather just code it and insert the pages into the database. There are a couple of gothas on using cgi-bin and wbedriver, but by enabling app page security you should be OK > -----Original Message----- > From: Woi Yew Fong [mailto:yfwoi@tpl.com.sg] > Sent: Tuesday, December 12, 2000 1:10 AM > To: Lista Informix (IIUG) > Cc: 'Sistema Unico (CNA)' > Subject: RE: How to secure my Application Builder Pages (APB) > > > I have the same problem too. but mine a little different. I > have my web > application with this url > http://www.retro.com/app/webdriver?MIval=default, > ( with REMOTE_USER? in web.cnf as default) > however, when somebody would to remove the 'default' with > 'apb' (App Builder > page), like this > http://www.retro.com/app/webdriver?MIval=apb > > they can see and edit my application source. > > Help, please. > > > -----Original Message----- > From: Sistema Unico (CNA) [mailto:sisdis@tournet.com.ar] > Sent: 12 December 2000 03:23 > To: Lista Informix (IIUG) > Subject: How to secure my Application Builder Pages (APB) > > > Hi everybody !!! > > I need your help because I have the following elements > running in my web > site: > 1) Netscape Entreprise Server (with the "nobody" user) > 2) Informix Dynamic Server 7.31.UC6 (with the "informix" user as > administrator) > 3) Web Datablade module with the web.cnf file configured with > the "informix" > user. > > I have one URL to reach my application, for example > http://www.ale.com.ar/app/webdriver?MIval=menu, and another > URL to get the > Application Builder pages, for example > http://www.ale.com.ar/developer/webdriver?MIval=apb. Anybody > who type this > last URL can access to my web design directory, and that's not cool... > > So I ask you: how can I do to secure my design directory ??? > What variables > and/or users do I set up and where do I have to implement it > (web.cnf, web > server or wherever yoy say....) > > Thanking in advance !!!! > > Alejandro Cabrera Obed > http://www.sisdis.gov.ar > E-mail: sisdis@tournet.com.ar > ICQ#95838645 > Bs. As. - Argentina > ********************************************************************** The contents of this e-mail are confidential to the ordinary user(S) of the mail address(es) to which it was sent and may be legally privileged. If you are not the intended recipient, any disclosure, copying, distribution or use of it, or any part of it, in any form whatsoever, and any actions taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. **********************************************************************