Re: newbie Q: let server send auto E-mail REs with attach.

From: Leythos (void_at_nowhere.com)
Date: 06/06/03


Date: Fri, 06 Jun 2003 11:22:00 GMT

In article <QkUDa.267402$EU3.19852892@amsnews03.chello.com>,
servaos@hotmail.com says...
> Hi,
>
> I'm not a security specialist, and I don't know of any, so I just ask here.
>
> I maintain a website of club on a Linux/Apache server. On the machine
> there's also a member database that is maintained by the secretary of the
> club using who can log in as administrator and edit entries. All members
> can view the database by loggin in as member.
>
> I want to do the following: let the secretary send an email with a certain
> subject to the server, and have the server convert the database to
> something Excel can read, and email it back to the secretary. This seems
> very easy to make, and quite useful.
>
> I wonder if this would contain a security hazard. Of course the server will
> check wether it's the correct email-addres (which is not modifiably by
> him), but on the other hand, the database is dynamically generated from a
> web form.
>
> I really have no idea.
>
> Bas
>

Since Excel will read CSV, XML, etc... Why not just provide another link
when the Sec/Admin connects to download a XML or csv file? It seems
simple enough, show everything you show now, but create a DOWNLOAD
button that is a link to the generated file (generate it when ckicked)?

-- 
--
spamfree999@rrohio.com
(Remove 999 to reply to me)


Relevant Pages

  • Re: For Andrea...Install MSDE w/ MSDE Depl.Toolkit. cont.
    ... When I installed the database on ... he is member of the local server sysadmin server role... ... every database residing on the MSDE instance even if the corresponding login ...
    (microsoft.public.sqlserver.msde)
  • User rights and XPe Component Database
    ... In a XPe developer team, we installed the XPe component database on a ... These 2 user groups are declared in the SQL database server, ... The problem doesn't occur if the user is also a member of the administrators ...
    (microsoft.public.windowsxp.embedded)
  • Re: For Andrea...Install MSDE w/ MSDE Depl.Toolkit. cont.
    ... > part of the sysadmins server role... ... he's not a member of either. ... >> states that the owner of the database is me. ...
    (microsoft.public.sqlserver.msde)
  • Re: How do I Exchange data with web server
    ... the csv file on the server side. ... However, really, connecting to the ... to the database is not an option because the web site requires the IP ... The ID that I'm trying to get back from the server is so when I send the ...
    (microsoft.public.access.forms)
  • newbie Q: let server send auto E-mail REs with attach.
    ... I maintain a website of club on a Linux/Apache server. ... can view the database by loggin in as member. ...
    (comp.security.misc)