Re: Filtering Query String

Thanks, downloaded mod_rewrite and got in working how I wanted in minutes!
Thanks again.


"Chris Crowe [MVP 1997 -> 2006]" <IISMVP2005@xxxxxxxxxxxxxxxxx> wrote in
message news:ODQ5sK2mGHA.976@xxxxxxxxxxxxxxxxxxxxxxx
You need an ISAPI re-writing tool. This would allow you to redirect on the
fly when you see a particular regular expression.

There are a lot around - some free, some commercial.

See http://blog.crowe.co.nz/category/19.aspx

--

Cheers

Chris Crowe [IIS MVP 1997 -> 2006]
http://blog.crowe.co.nz
------------------------------------------------


"West, I" <iain_west78@xxxxxxxxxxx> wrote in message
news:Oli%23LU1mGHA.2256@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

I have a client site who runs IIS5 as his web server with Filemaker 6 as
there backend database.

There is a major security flaw with the Filemaker web publishing engine
and with a simple url string (e.g. fmpro?-format=-dso_xml&-dbnames) you
can then view all the published databases, then you can drill down and
view and execute the scripts in the database and you can view all the
data stored in the database.

What I would like to do is filter the query string, so each time dso_xml
is found in the URL I would like to redirect to a 404 page. I have
looked at URLScan but I can't seem to get it to filter my url strings.

Can anyone give me any suggestions?

TIA

PS. Upgrading to Filemaker 8 is a major project and will take months to
complete as the whole database system has been rebuilt and switching
database products will not happen.






.

Relevant Pages

  • Re: Help w/FileMaker Pro 7
    ... I'm not a program or computer whiz but I've been using Filemaker Pro ... opened the database from there. ... host have operating system file sharing turned off, ... would on the host machine. ...
    (comp.sys.mac.apps)
  • Re: On-the-fly Value Lists
    ... This value list depends upon a relationship that filters the results by the ... 'other' database is doing, I can't tell you if there's a better way. ... Certified For Filemaker 8 ... John Weinshel wrote: ...
    (comp.databases.filemaker)
  • Re: webviewer background image from filemaker container field
    ... It is not elegant or simple the moment you factor in how a webviewer ... passes the result back to FM to display. ... info out of the schema of the database. ... And the quality of advice in books and formal filemaker education is ...
    (comp.databases.filemaker)
  • Re: Help Understanding Filemaker Logic
    ... The FileMaker database we're using has a layout for the Sales Slip. ... For lack of a better term it's the equivalent of the Access Sales Slip ... This is why all FM or other database projects begin with pencil and paper, the design of data structure cannot take place ad hoc, while trying to replicate paper forms or previous database solutions. ...
    (comp.databases.filemaker)
  • Re: Help Understanding Filemaker Logic
    ... Filemaker and I'm confused as to how our new Filemaker database has ... I'll use entering a sale ... form with a sub form for the actual items being sold. ...
    (comp.databases.filemaker)