[4176] in WWW Security List Archive

home help back first fref pref prev next nref lref last post

Re: adduser web page

daemon@ATHENA.MIT.EDU (BIS Inc)
Wed Jan 29 10:53:31 1997

Date: Wed, 29 Jan 1997 09:27:42 -0500
To: Rob Muhlestein <rmuhle@q7.com>
From: BIS Inc <ted@bisinc.com>
Cc: www-security@ns2.rutgers.edu
Errors-To: owner-www-security@ns2.rutgers.edu



RE:
>
>PUT, until recent implementations involving WYSIWYG editors (i.e.
>Netscape Gold, etc), has not been active in most servers because of the
>obvious security issues associated with allowing a web server to
>overwrite HTML documents with only flat-text password authentication.
>

<FORM METHOD="???" ACTION="????">

Can anyone point me in the right direction for exhaustive information on
the various METHODs and ACTIONs and their security implications and 
differences across a variety of browsers? (eg: method="post" action="mailto" 
works with some but not others).

Thanks,
Ted Buck

_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/
_/_/                                                            _/_/
_/_/  Buck Information Systems Inc.   Voice: (905) 525-6371     _/_/
_/_/  22 Orchard Hill                   Fax: (905) 777-0383     _/_/
_/_/  Hamilton, ON                Toll free: 1-800-355-2066     _/_/
_/_/  Canada  L8P 2V8                   URL: http://bisinc.com  _/_/
_/_/                                                            _/_/
_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/


home help back first fref pref prev next nref lref last post