Hi

Somebody knows like I can avoid that a user cannot do the following thing:

http://wwwserver/cgi-bin/ibi_cgi/ibiweb.exe?IBIF_adhocfex=CMD%20DIR


I need to have system commands enabled for other processes

Thanks

You can prevent adhoc requests. See for example: http://techsupport.informationbuilders.com/tech/wbf/wbf_tcn_023.html

Thanks Jack

Please pay special attention to the comment about Dev Studio (Dashboard and OLAP are also affected). Disabling IBIF_adhocfex will stop them from working.

JG (not j.g.)