[ic] Re: [include pages/[mv_arg] ]

interchange-users@icdevgroup.org interchange-users@icdevgroup.org
Fri Sep 6 04:09:05 2002


Rene Hertell writes: 

> Hello, 
> 
> I'm trying to include files with cgi-parameters into one of my pages. My tag
> syntax
> ([include pages/[mv_arg] ]) of this tag does obviously not work, but I don't
> know any other way doing it.. 
> 
> Any help is really much appreciated!

You should be more security aware !! The user can view any file
in your catalog tree with the above code, e.g mv_arg=../products/access.asc 

Bye
      Racke 

 

-- 
Prolific Interchange Consulting (Excellent German Quality !).
Take a look at Materialboerse (http://www.materialboerse.de/), WITT
(http://www.witt-weiden.de/), Boxmover (http://shop.boxmover.ch/) or
Passionshop (http://www.passionshop.com/racke). Need a shop ? Contact us.