29 mins

David Hamann

CVE-2021-44147: XML External Entity Vulnerability in Claris FileMaker

Uncovering XXE Vulnerabilities in FileMaker’s XML Parsing Source: https://davidhamann.de/2021/11/18/filemaker-xxe-vulnerability/ CVE FileMaker Pro CVE-2021-44147 A couple of months ago I looked more deeply into the “Import Records” functionality in FileMaker, especially the XML parsing, and was wondering if any XXE vulnerability may exist and how one could exploit this in technically interesting ways. The vulnerability is/was indeed there

12 mins

Charles Delfs

Introducing HAM, A dead simple way to manage authorization

HAM: Simplified, Powerful Authorization for Complex FileMaker Apps Charles Delfs, June 4, 2021, dotFMP Berlin 2021 Managing complex user authorizations in FileMaker apps is often a daunting task. With multiple user types, permissions, and plan tiers, it’s easy for developers to get lost in a maze of scripts, conditions, and configuration settings. HAM, or the

26 mins

Andrew LeCates

Security and compliance: An inside look

Claris Engage Beyond 2021 Table of Contents Introduction <a name=”introduction”></a> In an era where data breaches and cyber attacks are becoming increasingly sophisticated and frequent, the importance of robust security measures and regulatory compliance cannot be overstated. At the recent Claris Engage Beyond 2021 event, a distinguished panel of experts from Claris and the Claris

32 mins

Calvin Mosiman

FileMaker – Audit Logs

Implementing Comprehensive Audit Logs in FileMaker: An In-Depth Guide Calvin Mosiman, Jan 6, 2021, FileMaker Training Videos Table of Contents Introduction In today’s data-driven world, maintaining a detailed record of all actions performed within a database system is not just a best practice but often a legal necessity. Audit logs play a critical role in

10 mins

Beth Bennett

Customizing the Zabbix Dashboard for FileMaker Server Monitoring

Beth Bennet, Sep 23, 2020, Soliant Consulting Blog Source: https://www.soliantconsulting.com/blog/customizing-zabbix-filemaker-server/ The default dashboard that you get with a new Zabbix instance is not exactly optimized for monitoring a FileMaker server (see Figure 1). It focuses on displaying Problems, in two different ways, adds an analog clock showing your own current time, not the server’s time (why would

31 mins

Edward McPike

Authenticate Access to Your Solution with Microsoft Azure

Authenticating Access to Your Solution with Microsoft Azure Active Directory Edward McPike, Claris Engage 2020 Table of Contents Introduction In the modern digital era, ensuring secure and efficient access to applications is paramount. As organizations increasingly adopt cloud services and remote work environments, managing user authentication becomes both more complex and more critical. Microsoft Azure

15 mins

Stathis Askaridis

Audit Log and Transactional Edits

Stathis Askaridis, Sep 4, 2020, Claris Engage 2020 Table of Contents Introduction In this blog post, we will delve into a comprehensive exploration of Audit Log and Transactional Edits in FileMaker. The focus will be on creating a native, configurable audit log that uses transactional operations to maintain data integrity, secure critical operations, and provide

24 mins

Richard Carlton

FileMaker Workflow Security vs. Bad Guy Security

Richard Carlton, Jun 2, 2020, FileMaker Training Videos Introduction to FileMaker Workflow Security Overview of Workflow vs. Bad Guy Security Workflow security involves creating a controlled environment where users follow established procedures to maintain data integrity. However, “Bad Guy” security is about safeguarding against intentional breaches and attacks. By focusing on workflow security, organizations ensure

10 mins

Peter Baanen

How to investigate access privileges of Plug-ins and FileMaker Pro

Peter Baanen, Mar 21, 2020, Troi Plugins blog Source: https://www.troi.com/additional/how-to-investigate-access-privileges-of-plug-ins-and-filemaker/ With macOS 10.14 Mojave Apple added new (and more strict) security measures, which may cause some functions of the Troi File Plug-in to return an error. Some FileMaker script steps that worked before, will now return error code $$-5000, which is error afpAccessDenied (User does not have

16 mins

Tim Neudecker

How Not to Worry About Security in FileMaker

Tim Neudecker, FileMaker DevCon 2019 Session OverviewWhy Security MattersFileMaker Security Tools Session Overview Tim Neudecker’s session at FileMaker DevCon 2019, titled “How Not to Worry About Security”, emphasized the importance of integrating security into FileMaker applications from the ground up. Security, often considered an afterthought in many development processes, should be the first concern, given

38 mins

Heather McCue

Compliance Is a Process: FileMaker Is Your Toolbox

Heather McCue, FileMaker DevCon 2019 Introduction In today’s rapidly evolving regulatory landscape, understanding and achieving compliance is more critical than ever for developers and organizations alike. Regulations such as HIPAA, GDPR, and the CCPA present significant challenges but also opportunities for developers to showcase their expertise in building secure, compliant applications. The session “Compliance Is

169 mins

Wim Decorte

Getting Started with Zabbix in FileMaker

Zabbix installation on Linux Wim Decorte, Sep 11, 2019, Soliant Consulting Blog Source: https://www.soliantconsulting.com/blog/zabbix-filemaker-starter-guide/ This post is one in a series of guides that walk you through installing, configuring, and using Zabbix to monitor your FileMaker servers: Why Zabbix? To top We believe that monitoring your FileMaker Server is crucial for a stable, performant, and

16 mins

Aaron Kaiser

Zabbix FileMaker Server Monitoring

Source: https://dbservices.com/blog/zabbix-filemaker-server-monitoring Aaron Kaiser, May 22, 2019, DBServices blog Zabbix, one of the largest free and open source server monitor applications with 300,000 installations worldwide, can be used to collect and display metrics from multiple FileMaker servers at once on one interface; therefore, giving you the ability to save time monitoring servers individually. Viewable from a

22 mins

Claus Lavendt

EU GDPR: Why You Should Care

Claus Lavendt, FileMaker DevCon 2018 Menu: Introduction With the growing demand for data protection and privacy, the General Data Protection Regulation (GDPR) has become one of the most significant data protection laws in modern history. The regulation is not limited to European companies, as it applies to any business that handles the personal data of

59 mins

Wim Decorte

External Authentication Options in FileMaker: EA, SSO, AD, OD, OAuth, LDAP

Mastering External Authentication in FileMaker: EA, SSO, AD, OD, OAuth, and LDAP Unveiled Wim Decorte, FileMaker DevCon 2017 Table of Contents Introduction In today’s interconnected digital landscape, managing user authentication efficiently and securely is paramount. The FileMaker Platform, widely used for creating custom apps, recognizes this need and has evolved to support various external authentication

CyberFM

Privilege

Customizing the Zabbix Dashboard for FileMaker Server Monitoring

Audit Log and Transactional Edits

How to investigate access privileges of Plug-ins and FileMaker Pro

How Not to Worry About Security in FileMaker

Zabbix FileMaker Server Monitoring