Dimitris Kokoutsidis, Sept 8, 2024, CyberFM Many FileMaker developers rely on hardcoded license keys for plugin solutions. I have a few questions regarding this approach: Overview of Plugin License Texts Following the blog post, you’ll find the detailed license texts for major FileMaker plugins. This section serves as a guide to understand how each plugin
Bypass authorization of FileMaker Server or “there is no such category” Source: https://fm-security.com/posts/bypass_auth/ CVE FileMaker Server CVE-2024-27790 Menu Introduction In the summer of 2023, I decided to investigate the internal communication protocol between FileMaker clients and the server. This led to the discovery of perhaps the most significant vulnerability in the platform’s history. I discovered that it
Wim Decorte, Doug Wallis, Jun 13, 2024, Claris Community Live 1. Introduction Security in FileMaker development has evolved from a “nice-to-have” feature to an absolute necessity. In the third Claris Community Live event, Rosemary Tietge, along with experts Wim Decorte and Doug Wallis, walked through the most relevant security challenges, solutions, and best practices for
Wim Decorte, Claris Engage 2024 As the complexity of digital ecosystems continues to evolve, ensuring the security of the applications we build has never been more important. With the increasing sophistication of attacks, even a small oversight can lead to catastrophic results such as data breaches, fines, or damage to reputation. This blog post delves
A Deep Dive into FileMaker Security and Cyber Threats André Just Vedgren, EngageU 2022 In today’s rapidly evolving digital landscape, cybersecurity is a top priority for businesses of all sizes. Whether you’re managing a small business or overseeing a large organization, the risks associated with data breaches, ransomware, and cyber espionage are increasing. This comprehensive
Claus Lavendt, Jan 8, 2022, FilaMaker Training TV Automating the installation of a FileMaker Server can save countless hours, minimize errors, and ensure consistent configurations every time. In this blog post, we’ll take you through a step-by-step guide on using shell scripts to automate the setup of a FileMaker Server on Ubuntu Linux, featuring insights
DIGFM: Table of Contents Introduction Ransomware attacks have surged in both frequency and sophistication, posing a significant threat to organizations worldwide. These attacks can cripple operations, lead to substantial financial losses, and damage reputations. For organizations using FileMaker Servers—a popular platform for creating custom apps that work seamlessly across devices—the stakes are particularly high due
Uncovering XXE Vulnerabilities in FileMaker’s XML Parsing Source: https://davidhamann.de/2021/11/18/filemaker-xxe-vulnerability/ CVE FileMaker Pro CVE-2021-44147 A couple of months ago I looked more deeply into the “Import Records” functionality in FileMaker, especially the XML parsing, and was wondering if any XXE vulnerability may exist and how one could exploit this in technically interesting ways. The vulnerability is/was indeed there
HAM: Simplified, Powerful Authorization for Complex FileMaker Apps Charles Delfs, June 4, 2021, dotFMP Berlin 2021 Managing complex user authorizations in FileMaker apps is often a daunting task. With multiple user types, permissions, and plan tiers, it’s easy for developers to get lost in a maze of scripts, conditions, and configuration settings. HAM, or the
Koen Van Hulle, Claris Engage 2020 Menu Introduction: Why SSL Certificates Matter for FileMaker Server #tag1 With the rising number of data breaches and cybersecurity threats, securing the connection between your FileMaker Server and your users has become essential. An SSL certificate ensures that all communication between your server and clients is encrypted, preventing potential
Authenticating Access to Your Solution with Microsoft Azure Active Directory Edward McPike, Claris Engage 2020 Table of Contents Introduction In the modern digital era, ensuring secure and efficient access to applications is paramount. As organizations increasingly adopt cloud services and remote work environments, managing user authentication becomes both more complex and more critical. Microsoft Azure
Richard Carlton, Jun 2, 2020, FileMaker Training Videos Introduction to FileMaker Workflow Security Overview of Workflow vs. Bad Guy Security Workflow security involves creating a controlled environment where users follow established procedures to maintain data integrity. However, “Bad Guy” security is about safeguarding against intentional breaches and attacks. By focusing on workflow security, organizations ensure
Mastering External Authentication in FileMaker: EA, SSO, AD, OD, OAuth, and LDAP Unveiled Wim Decorte, FileMaker DevCon 2017 Table of Contents Introduction In today’s interconnected digital landscape, managing user authentication efficiently and securely is paramount. The FileMaker Platform, widely used for creating custom apps, recognizes this need and has evolved to support various external authentication
Ronnie Rios, FileMaker DevCon 2015 In today’s digital world, securing sensitive information such as customer data, financial records, and intellectual property is critical for businesses of all sizes. In his 2015 DevCon session, Ronnie Rios highlighted the main security threats facing FileMaker users and provided practical solutions for addressing these risks. This blog post offers