Re: Has there been in-the-wild i Series virus?

It's exactly for this reason that our web app's logic is behind stored procedures, which are the only things that can be called by the application server. I think it's asking for trouble if you use the normal way of allowing a PHP or Node applications free run at the database.



________________________________
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> on behalf of Steve Richter <stephenrichter@xxxxxxxxx>
Sent: 25 March 2020 04:22
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: Has there been in-the-wild i Series virus?

On Tue, Mar 24, 2020 at 10:54 PM Booth Martin <booth@xxxxxxxxxxxx> wrote:

That seems like a powerful argument to go to IWS and web services for
non-5250 applications.

Not allow any direct access to ibm I database from php? I would not even
know how to do that.

On 3/24/2020 9:15 PM, Steve Richter wrote:

what do shops use for their user profile when a PHP script connects to

the

IBM i database? Most likely a user profile with a default password.
Couple that with the setup where a single IBM i library contains the data
files of all the applications. That means that a single PHP script has
full access to all your application data.

On Tue, Mar 24, 2020 at 4:16 PM Booth Martin <booth@xxxxxxxxxxxx> wrote:

At one time someone said there has never been an i-Series virus in the
wild? Never knew if it was true then or not.

If it was true, is it still true?

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.midrange.com%2Fmailman%2Flistinfo%2Fmidrange-l&amp;data=02%7C01%7C%7C98e953ca739f4520495f08d7d06c0223%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637207034617945729&amp;sdata=kR2XoYPraS2L56Dku7K7ddeWdku348OAiDY5ra3on44%3D&amp;reserved=0
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Farchive.midrange.com%2Fmidrange-l&amp;data=02%7C01%7C%7C98e953ca739f4520495f08d7d06c0223%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637207034617955734&amp;sdata=ylMdtb0i4N%2FaqxJ5749fNRduUIvgOPLiQbr2OPseivw%3D&amp;reserved=0.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Famazon.midrange.com&amp;data=02%7C01%7C%7C98e953ca739f4520495f08d7d06c0223%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637207034617955734&amp;sdata=EvHeUi17dp2rg%2BIqTFR2r0j4vF6UOzkJU4oTJcHVJdA%3D&amp;reserved=0

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.midrange.com%2Fmailman%2Flistinfo%2Fmidrange-l&amp;data=02%7C01%7C%7C98e953ca739f4520495f08d7d06c0223%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637207034617955734&amp;sdata=GsP%2BWCd01j9LXBum%2Fti%2BRvVdRCsXXcAkv5sSuO2PyOI%3D&amp;reserved=0
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Farchive.midrange.com%2Fmidrange-l&amp;data=02%7C01%7C%7C98e953ca739f4520495f08d7d06c0223%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637207034617955734&amp;sdata=ylMdtb0i4N%2FaqxJ5749fNRduUIvgOPLiQbr2OPseivw%3D&amp;reserved=0.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Famazon.midrange.com&amp;data=02%7C01%7C%7C98e953ca739f4520495f08d7d06c0223%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637207034617955734&amp;sdata=EvHeUi17dp2rg%2BIqTFR2r0j4vF6UOzkJU4oTJcHVJdA%3D&amp;reserved=0

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.midrange.com%2Fmailman%2Flistinfo%2Fmidrange-l&amp;data=02%7C01%7C%7C98e953ca739f4520495f08d7d06c0223%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637207034617955734&amp;sdata=GsP%2BWCd01j9LXBum%2Fti%2BRvVdRCsXXcAkv5sSuO2PyOI%3D&amp;reserved=0
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Farchive.midrange.com%2Fmidrange-l&amp;data=02%7C01%7C%7C98e953ca739f4520495f08d7d06c0223%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637207034617955734&amp;sdata=ylMdtb0i4N%2FaqxJ5749fNRduUIvgOPLiQbr2OPseivw%3D&amp;reserved=0.

Please contact support@xxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Famazon.midrange.com&amp;data=02%7C01%7C%7C98e953ca739f4520495f08d7d06c0223%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637207034617955734&amp;sdata=EvHeUi17dp2rg%2BIqTFR2r0j4vF6UOzkJU4oTJcHVJdA%3D&amp;reserved=0