RE: HTTP Server's jobs for CGI applications

[boldt@xxxxxxxxxx]

Brad wrote:
>With cookies, finding the cookie on your hard drive is the first part of
it.
>Next, if the data isn't "human readable", then you'll have quite a time
>figuring out what to replace and what to replace it with.  Remember,
because
>you know how to do it (or claim to) doesn't make it "easy".  Especially
>since most people that place cookies no doubt do double checks on the data
>to eliminate this security "risk".

IE:  Try C:\WINNT\COOKIES
NS:  Look for COOKIES.TXT

As I said, if someone can figure out how to hack an HTML file,
they can certainly figure out how to hack a cookie.  As I
reminded you before, understanding how to use a search engine
can go a long way.


>I don't know where you get your experience from on this subject, Hans, but
>it shows (or doesn't).

Like I said, I've never written an "e-commerce" application.
Likewise, I've also never written a business application in
RPG.  Furthermore, as far as I know, no one currently working
in the RPG development team has ever written a business app
in RPG.  And that may well be true for the past 10-20 years of
RPG compiler development in Toronto.  By your logic, the
opinions of all of these people don't matter either.

-------

Anyways, as I said before, I'm currently on loan to a major
web development project here in the lab and I've got lots of
work to do.

I promise, THIS will be my last posting.

Have a nice day!

Hans Boldt, ILE RPG Development, IBM Toronto Lab, boldt@ca.ibm.com


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---