RE: Web Development Software

[Ken Slaugh <ken.slaugh@xxxxxxxxxx>]

Agreed, VBA is no security risk if used strickly for server side function.
The browser never even knows it executed because it doesn't run on the
browser at all.

However, I do agree that Microsoft does leave HUGE hole in security by
enabling VBScript on the browser. Don't allow your browser to execute script
from a unrecognized source.

Ken Slaugh  (707) 795-1512 x118
Chouinard & Myhre, Inc.
AS/400 Network Administrator / MSE
Client Access/400 Specialist
http://www.cm-inc.com/


-----Original Message-----
From: Chuck Lundgren [mailto:lundgren@iris-software.com]
Sent: Tuesday, March 28, 2000 3:20 PM
To: MIDRANGE-L@midrange.com
Subject: Re: Web Development Software


At 03:12 PM 3/28/00 -0600, you wrote:
> > VBA is used to extend the editing environment; hardly a security issue.
VBA
> > is currently an under-used but really powerful feature of FrontPage.
>
>VBA is currently a melting pot of security holes. See the following link
>for a short list af all the wonderful things VBA allows virus writers to
>do to your PC.
>http://search.nai.com/mediasearch/cgi-bin/mediasearch.exe?0=0&1=0&5=compact
&3=0&4=macro&6=10&45=0&46=1&7=0&7=8&7=10&search=SEARCH

This has everything to do with Word macros and nothing to do with FrontPage 
Add-ins written in VBA.

> > This is a four by four table generated in FP (I hope this comes
through):
>
>That was much better than earlier versions. Did you touch the code at
>all, or is there a new feature which allows you the specify that all
>HTML tags be in lower case?

I didn't do anything to the code. I pressed the button to generate a table, 
specified 4 x 4 cells, toggled to the html view, and copied the resulting 
code. And yes, you can specify that all tags appear in lower case. Pretty 
cool...

>Non breaking space is just a place holder in this case. What I hate is
>when Frontpage puts 50 or 60 breaks in your code to position the
>elements.

Hmm... I'm not sure what you're referring to. This might be an artifact 
from older versions of FP.

  ... Chuck

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
david@midrange.com
+---
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---