Given that external files pose a security risk the easiest way to prevent the
risk is to totally block the indiscrimate use of external files.

It seems to me that we could allow the placing of additional entries in IBConfig
which specify the path(s) of external files. The syntax could be similar to that
for specifying temporary directories. If there are no EXT_FILE_DIR entries then
no external files are allowed. Otherwise only the directories specifically
mentioned can be used. The syntax for external file creation would remain the
same.

Any thoughts? Any takers to see if this could be implemented?

Paul
--

Paul Reeves
http://www.ibphoenix.com
taking InterBase further