> -----Original Message-----
> From: Adam Clarke [mailto:Adam.Clarke@...]
> Sent: Sábado 2 de Diciembre de 2000 17:39
>
> Perhaps udf's need some form of code signing (storing the certs in system
> tables) to ensure that the udf in effect is the one that was originally
> installed and came from a trusted (or at least identified) source.

IB directory should not be writable by common users. Since the configuration
file lies here, as long as only the admin can change it, by default IB6 will
look for UDFs only in the Interbase\UDF directory, so no foreign code can be
injected by a common user (as it's possible in earlier versions) by putting
the UDF in a directory in the system path, unless the library the admin
installed is a trojan.

C.