| Spartanicus 2006-04-02, 6:36 am |
| Stephen Poley <sbpoleySpicedHamTrap@xs4all.nl> wrote:
>If you ever get frustrated by trying to convince people to build their
>web pages properly, you could try pointing them at this:
>
>http://www.thedailywtf.com/forums/65974/ShowPost.aspx
That primarily demonstrates the poor skills of the author of the CMS,
not of the client. Clients shouldn't be expected to be knowledgable
about security, the developer has no such excuse.
A developer that allows a client instruction to result in a system that
can be compromised in this way has failed in one of his primary tasks;
preventing clients from harming themselves.
From the story I gather that the developer still hasn't learned this
lesson, even after this faux pas.
--
Spartanicus
|