> I am researching the Oracle web server product and I wanted to see if
> the rest of the community has found any specific CGI flaws that I
> should address to help secure this platform (it will reside between a
> dual firewall environment). It seems that all scripting is
> accomplished in PL SQL (is this a superset of PERL or C?). Thank you
Neither. Its ORACLE's proprietary stored procedural language. Its similar to
PASCAL and its not new. Its been around since ORACLE 6. I prefer a
few powerful CGI and HTML classes written in C++ giving me just as
much power as ORACLE's method of direct PL/SQL interface. PL/SQL
is great for database programming, but it lacks in other areas,
and I know of noone in my circle who uses it for CGI.
Also, a system level language like C can allow you to implement other
security layers which should be on your mind if you are allowing
SQL from the Web to hit your database.
Melvin Smith
References:
-
CGI & Oracle
From: "Daniel Salenger" <dsalenger @
dttus .
com>
|
|
