Thursday, December 05, 2002

Tower Records Security hole - c|net - This one is really bad security flaw and the write up tells you how it happened. This is a REALLY good example of having a code review AND a set of best practices that you adhere to ABSOLUTELY.... Lots of caps there, but I think you will agree. The article... The problem... They had their order information form set to method="get" and that puts the arguments into the URL. When the user saw that, they could enter different order numbers and volia! They are in another customer's order profile. 2:44:58 PM      comment []

Dreamweaver MX 6.1 update released - In all the excitement of the Contribute and DRK2 Launches, I did not explicitly mention that the bug fix for DMX is in fact avaliable from the MM site. The update fixes a number of bugs. In what I think is utterly counterintuitive though, this update is called the "Dreamweaver Update for Contribute"... Regardless  of the name, you should be installing this update. It fixes some really annoying things that you may run into. 8:56:50 AM      comment []