|
|
 |
xssi
date posted 10th July 2001 15:50
ian mentioned that you could use xssi to include remote files, i cant find
anything about this but would like to know more since imo its a sodding
security hazard.
can you imagine if someone could include your connect.asp or global.asa
remotely? you would need to be connecting to a sql/oracle/db2 box with IP
restrictions on the firewall to be safe, and even then couldn't a hacker
could spoof the relevant IP to access your database?
|
 |
|