TABLE OF CONTENTS Prototype: object.AddFile (ByVal pathname As String, [relateddocument As Boolean]) As VBComponent
Summary: This method is used to return a newly added component to a VBComponent object.
Description: The AddFile method is a part of the VBComponents collection, and is used to add a file to a VBComponent object. This method takes two parameters, one required and the other optional. The first parameter is the pathname; it is a path and filename of a file to open as a template. The second optional parameter is the relateddocument; it's a Boolean expression specifying whether the file is to be treated as a standard module or a document.
Risk: All parameters passed to the function from user input should be carefully analyzed to prevent access to or overwriting of components. Invalid adds into the collection class can result in data corruption or unauthorized execution of code.
Additional Resources: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/vbext98/html/vbmthaddfilemethod.asp
Impact: Medium
Prototype: object.BuildPath(path, name)
Summary: This method is used to append a name to an existing path for a FileSystemObject object.
Description: The BuildPath method is a part of the FileSystemObject object, it is used to append a name to an existing path. This method takes two required parameters. The first parameter is the path; it is a path to which the name parameter is to be appended. The second parameter is the name that needs to be appended to the existing path.
Risk: When parsing input data to obtain pathing for...
