I am mostly self-taught when it comes to FileMaker, so my knowledge is limited. I have encountered a security related problem, and I am pretty much stumped:

I have a database (running FM 5 Unlimited) allowing users to create and manage their own accounts via the web. Problem is, this solution is not very secure. Someone who knows what they're doing could with CGI requests pull data from any record, including others' user names and passwords. Is there anything I can do to prevent this from happening?

I have considered the Web Security Database, but would that allow users to create their own accounts via the web? Also, I heard that not even the Web Security Database is bulletproof (http://www.blueworld.com/blueworld/news/05.01.00-FM5_Security.html)

Would using Lasso Web Data Engine and/or upgrading to a newer version of FileMaker solve my problems?

I am also running WebSTAR 4.5 on the same machine, and I have access to SSL if needed.

I would be very grateful for even the slightest bit of help or point in the right direction. Thanks!

Now I know why FMI doesn't like Blue World

Sure with Lasso -- now 6.0.2 you will have great security.

Try to use WebSecurity db and exact search.

We have also security filter for Windows platform.

HTH