Dreaweaver security?

[EddyTheDog]

I need to build a small web app for a small company and they are totaly over the top about security - You would think they were Bank Of America and not a chain of bloody hair salons....

Anyone have a POV on the securtity that is provided by the functions that are built into apps made with DW?

Thanks

[Enjoy Bucks]

use notepad and feel safe sleeping

[EddyTheDog]

use notepad and feel safe sleeping

They are not paying me enough to start down that road - This out of my comfort zone to be honest - Its a lot different than knocking out galleries.....

I don't want to waste my time reinventing the wheel if I don't have to.

[nextri]

What software you use to develop has nothing to do with the security of the app your making..
Tell them security costs extra, and read up on security.

[seeandsee]

you will write that web app in?

[EddyTheDog]

What software you use to develop has nothing to do with the security of the app your making..
Tell them security costs extra, and read up on security.

DW comes with pre-made functions for logging in etc - So what I am asking really is are those functions secure?

[woj]

What software you use to develop has nothing to do with the security of the app your making..
Tell them security costs extra, and read up on security.

He is planning to use some pre-built libraries that come with DW...if those happen to have security holes, then you are fucked... but realistically, if you keep up with DW updates, it should be pretty safe...

[EddyTheDog]

you will write that web app in?

PHP for sure - I prefer it to asp/jsp and I am hosting it and will not set up Tomcat just for them.

[EddyTheDog]

He is planning to use some pre-built libraries that come with DW...if those happen to have security holes, then you are fucked... but realistically, if you keep up with DW updates, it should be pretty safe...

Thanks woj - That is pretty much what I needed to know.

[V_RocKs]

http://www.dreamweaverclub.com/vtm/php-login-script.php

[raymor]

PHP for sure - I prefer it to asp/jsp and I am hosting it and will not set up Tomcat just for them.

Be sure to write for the very latest PHP then. Most of the many deprecated functions are deprecated because of serious security concerns. Also you'll have sinew work to do in php.ini. With version 5.3 and the upcoming 6.0 PHP it's getting significant security improvements because such improvements were needed. Still, it's currently not possible to write a PHP script that doesn't have a specific dos vulnerability. See also phpids.

[mafia_man]

Use a framework and the security will not be a big problem unless you're a incompetent programmer.

[EddyTheDog]

http://www.dreamweaverclub.com/vtm/php-login-script.php

Nice one!!

Thanks

[blackmonsters]

use notepad and feel safe sleeping

[georgeyw]

DW comes with pre-made functions for logging in etc - So what I am asking really is are those functions secure?

If you are unable to create your own login function then you should not be taking on this job.

[EddyTheDog]

If you are unable to create your own login function then you should not be taking on this job.

I probably could, but why bother when some of the best coders around have already done it for me? - I paid a fair amount of cash for DW and its functionality....