Hi

I thought that to cdml files in the CDML_FORMAT_FILES directory it is not possible to see their code, but when I do "view source" in iexplorer it shows me the whole code..... Am I missing something here?

I do not understand a bit from that question... Sorry...

We are missing your URL for testing.

The "View Source" from a browser will always show the html sent to the browser. You will not see the cdml.

All the best.

Garry

Hi

I see. so there is no way to hide completley the information about the DB an layout?

I still don't understand...

Unfortunately, that information will be difficult to hide. I have used methods with Javascript to construct Forms and URLs, on Submission, to help make that information obscure.

All the best.

Garry

Frames seem to work pretty well in that regard.

The sourse code *IS* the web page.

If you are worried about users seeing HTML forms and field names and feel it is a serious security risk then the database shouldn't be on the web.

Have you read FileMaker's white paper on web security guidelines? http://www.filemaker.com/downloads/pdf/websecurity122002.pdf

RE: If you are worried about users seeing HTML forms and field names and feel it is a serious security risk then the database shouldn't be on the web.

Or served more intelligently and securely through Lasso and [Action_Params] and Inlines. Then no database and field names are passed at all.

or move to other DB....or....find another "or"