«

On Wed, 10 Dec 2008 15:23:55 -0600, "E.D.G." <>
wrote:

>"E.D.G." <> wrote in message
>news: om...
>> Posted by E.D.G. December 10, 2008
>>
>> Is there an html command that can be used to get text in some file to
>> automatically load into an html document in the same way that a picture
>> file can be loaded with the <IMG SRC="URL"> command?
>
>Thanks for all of the suggestions.
>
>The html file application involved here is evolving so rapidly that it would
>presently not be worth the effort to go too far with this. I thought that
>there might be a simple html code that I was not aware of that could be
>used.
>
>It is surprising to me that this type of command was not built into html
>when it was developed. It would seem to me to be a logical addition.


One possible method, although restricted by document type, is to use
an iframe. Without borders readers wouldn't know the difference.

Gazing into my crystal ball I observed richard <>
writing in news::

> On Wed, 10 Dec 2008 15:23:55 -0600, "E.D.G." <>
> wrote:
>
>>"E.D.G." <> wrote in message
>>news:UeWdnWMXV5oejN3UnZ2dnUVZ_oWdnZ2d@earthlink. com...
>>> Posted by E.D.G. December 10, 2008
>>>
>>> Is there an html command that can be used to get text in some file
>>> to automatically load into an html document in the same way that a
>>> picture file can be loaded with the <IMG SRC="URL"> command?
>>
>>Thanks for all of the suggestions.
>>
>>The html file application involved here is evolving so rapidly that it
>>would presently not be worth the effort to go too far with this. I
>>thought that there might be a simple html code that I was not aware of
>>that could be used.
>>
>>It is surprising to me that this type of command was not built into
>>html when it was developed. It would seem to me to be a logical
>>addition.
>
>
> One possible method, although restricted by document type, is to use
> an iframe. Without borders readers wouldn't know the difference.
>
>

Yes, and that is why drive by malware uses iframe, because a user
usually misses an iframe, especially when it is 1 pixel.

There were a lot of asp pages using SQL server, whose developers did not
use best practices (mostly because they just did not know them), and
whose dbs were injected with javascript that created a drive-by iframe
that took the user to several malware sites. I know about this because
it happened to me until I locked down my application. Now, none of my
browsers enable iframe.


--
Adrienne Boswell at Home
Arbpen Web Site Design Services
http://www.cavalcade-of-coding.info
Please respond to the group so others can share

Adrienne Boswell wrote:

> Yes, and that is why drive by malware uses iframe, because a user
> usually misses an iframe, especially when it is 1 pixel.
>
> There were a lot of asp pages using SQL server, whose developers did not
> use best practices (mostly because they just did not know them), and
> whose dbs were injected with javascript that created a drive-by iframe
> that took the user to several malware sites. I know about this because
> it happened to me until I locked down my application. Now, none of my
> browsers enable iframe.

Yep, caught a slew of ColdFusion/MSSQL coders with their pants
down...their didn't validate passes parameters to the db, dumb-dumb-dumb...

--
Take care,

Jonathan
-------------------
LITTLE WORKS STUDIO
http://www.LittleWorksStudio.com