[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: static ip to dhcp conversion -- getting a hostname



At 12:13 PM 3/5/2004, John Schmidt wrote:

Unfortunately, it is not my decision to make.  If it were, I would not have
the dhcp server assign hostnames.

Besides the problem of breaking things that work, isn't this also a potential security issue? For instance I offer a free formmailer script that ppl can d/l and install on their websites. It includes a provision for hard coding the domain it is installed to, which the script compares at run time against the $ENV{HTTP_REFERER}. If these don't match the email won't be sent.

If not for that check, spammers and all sorts of nasty folk would be free to hijack the script from any site it was running on. If this process were automated e.g. through a Perl script using LWP::UserAgent to post to the form such an exploit could not only ruin the good name of the real site owner it could also consume their bandwidth, cost them $$, have them lose their account etc..

Just my two cents.

Marty Landman   Face 2 Interface Inc.   845-679-9387
FormATable  DB: http://face2interface.com/Products/FormATable.shtml
Make a Website: http://face2interface.com/Home/Demo.shtml
Free Formmailer: http://face2interface.com/Products/Formal.shtml


Reply to: