22    FileMaker Pro Web Publishing Security Guidelines

3. 

Select the

 Table View

 tab.

4. 

In the

 Choose layout for browser viewing 

area, select a layout. 

The layout you select will be used to generate the Instant Web Publishing  Table View  pages, so 

it should include only the fields you want web users to work with in Table View. 

5. 

Select the 

Form View

 tab.

6. 

In the

 Choose layout for browser viewing 

area, select a layout.

The layout you select will be used to generate the Instant Web Publishing  Form View  pages, so 

it should include only the fields you want web users to work with in Form View.

7. 

Select the 

Search

 tab.

8. 

In the

 Choose layout for browser viewing 

area, select a layout.

The layout you select will be used to generate the Instant Web Publishing  Search  pages, so it 

should include only the fields you want web users to work with in Search View.

9. 

Click 

Done

.

10. 

Click 

OK

.

Recommendations

On the Web, access privileges allow web users to perform authorized actions on all records in the 

database to which they have been granted access. For greater security, consider disabling edit and 

delete privileges for all passwords to be used on the Web for Internet users. If different forms of 

security are required, consider using Custom Web Publishing with the Web Security Database. 

Review any scripts in your database. Even though a script cannot be used to perform an action 

prevented by a password, access privileges password protection does not prevent web users from 

running scripts using the CGI commands 

& script

, 

& script.prefind,

 and 

& script.presort

. You need to ensure that any scripts defined in any databases you share over 

the Web/intranet will not perform inappropriate actions. It is safest to web publish from databases 

in which no scripts have been defined. Alternatively, if you need to disable the ability for web users 

to run scripts, you need to use Custom Web Publishing with the Web Security Database to define 

User Name and User Password pairs that do not have Script permissions. 

Protecting Custom Web Publishing solutions

There are two methods of protecting Custom Web Publishing solutions: FileMaker Pro access 

privileges or the Web Security Database.

Important

  When you publish databases using FileMaker Pro Custom Web Publishing, you make it 

possible for the Web Companion to use XML and/or CDML to execute commands in FileMaker 

Pro. The ability to use XML and/or CDML is intrinsic to Custom Web Publishing, and cannot be 

disabled, however, the execution of these commands can be limited or prohibited using the security 

methods described below.