jsteinmann wrote:
> Have the security issues with the code Dreamweaver
writes been fixed in CS3
> compared to Studio 8? Studio 8 creates code that is
easily subject to security
> hacks, like SQL injections.
The 8.0.2 updater fixed the SQL injection vulnerabilities.
The code
created by CS3 incorporates the same security measures.
There was a lot of controversy among ASP users that 8.0.2
"broke
previously valid SQL". Since I haven't used ASP for about six
years, I
didn't follow the arguments closely, but the main conclusion
among
"experts" appeared to be that the broken SQL was using an
inappropriate
technique.
As for PHP, the 8.0.2 updater fixed the security loopholes,
but
inadvertently introduced a couple of new bugs. They can be
fixed by
applying the extension fix downloadable from the link in the
first
sentence on the following page:
http://www.adobe.com/go/b6c2ae2a
Those bugs were, of course, eliminated in CS3.
Also with PHP, there was some controversy about the changes
"breaking"
SQL that uses wildcard searches of numerical data. In fact,
the changes
don't break wildcard searches, but they apply the rules of
SQL more
strictly. When using LIKE, the data type must be set to
"Text" as
wildcard searches apply to strings, not to numbers. Of
course, you can
use wildcards to search for numbers, but they must be treated
as a string.
Tom Muck has some strong views about the way the changes
hamper the use
of dynamic data, but I've not encountered any problems
myself.
--
David Powers, Adobe Community Expert
Author, "The Essential Guide to Dreamweaver CS3" (friends of
ED)
Author, "PHP Solutions" (friends of ED)
http://foundationphp.com/
14
Replies
AdChoices