| Author | Messages | |
SplatMan_DK
Posts:81
| | 01/23/2007 6:31 PM |
| I just had a crazy thought...
Is there any way (or reason) to take advantage of PageBlasters replacement-ability when a user submits data to the webserver (HTTP POST etc)? I mean, could filtering inbound traffic in that way actually be a quick "miracle-method" for securing the webserver against hacking and SQL injections?
- Jesper | |
brgds
- Jesper | |
| |
| John Mitchell
Posts:3248
| | 01/24/2007 10:40 AM |
| My first thought is that it would probably be better for developers to handle that kind of security directly. But it is an out of the box kind of idea that might be put to good use by power users.
Right now, PageBlaster only operates on the text/html that is "going out" (Response), but I guess if I allowed the end user to manipulate the "coming in" (Request) items then it may provide some value.
I did try manipulating the Request as it was coming in (for viewstate) and it turned out not to be an easy chore in an HttpModule, but I'll give it more thought, thanks. | | | |
| SplatMan_DK
Posts:81
| | 01/24/2007 10:54 AM |
| You could call it "Secure Blaster"  and charge another 10-30 bucks for it.
I can't possibly be the only one worrying about the security of my portal. And I would certainly pay to gain a little extra security - the prospect of a known bug in the DNN core or in a module compromising my portal is enough motivation to spend money on a solution.
- Jesper | |
brgds
- Jesper | |
| SplatMan_DK
Posts:81
| | 01/26/2007 8:15 PM |
| Oh, and hey, here is another idea for the replacement filter:
Make a standard filtering package with banned words (profanity, racism, etc). Who said "ProfanityBlaster"?  This method of banning words would work in any content on the website - even forums where users type all sorts of ... stuff ... and since pages can be cached by PageBlaster, the performance impact shouldn't be too high.
Seriously, I think it would make the main product more attractive, and it would certainly be an easy way to get more attention to the product. Think it over.
- Jesper | |
brgds
- Jesper | |
|
|