Cdml_format_files viewable...??

[xtrim]

Hi

I thought that to cdml files in the CDML_FORMAT_FILES directory it is not possible to see their code, but when I do "view source" in iexplorer it shows me the whole code..... Am I missing something here?

[Anatoli]

I do not understand a bit from that question... Sorry...

We are missing your URL for testing.

[Garry Claridge]

The "View Source" from a browser will always show the html sent to the browser. You will not see the cdml.

All the best.

Garry

[xtrim]

Hi

I see. so there is no way to hide completley the information about the DB an layout?

[Anatoli]

I still don't understand...

[Garry Claridge]

Unfortunately, that information will be difficult to hide. I have used methods with Javascript to construct Forms and URLs, on Submission, to help make that information obscure.

All the best.

Garry

[Unable]

Frames seem to work pretty well in that regard.

[Vaughan]

The sourse code *IS* the web page.

If you are worried about users seeing HTML forms and field names and feel it is a serious security risk then the database shouldn't be on the web.

Have you read FileMaker's white paper on web security guidelines? http://www.filemaker.com/downloads/pdf/websecurity122002.pdf

[Anatoli]

RE: If you are worried about users seeing HTML forms and field names and feel it is a serious security risk then the database shouldn't be on the web.

Or served more intelligently and securely through Lasso and [Action_Params] and Inlines. Then no database and field names are passed at all.

[Leb i Sol]

or move to other DB....or....find another "or"