Support forums - Security hole ?

Support forums » Products » Cute Editor for ASP » Re: Security hole ?

Security hole ?

Last post 06-10-2004, 5:55 PM by Adam. 5 replies.


	Sort Posts: Previous Next

06-09-2004, 3:07 PM 966

alakazoo
Joined on 06-09-2004
Montreal
Posts 10

Security hole ?

Reply Quote

Is it normal that a user can upload asp file ?

An asp file is executed on the server side it can be harmful.

Kazoo

06-09-2004, 3:13 PM 967 in reply to 966

Adam
Joined on 09-23-2003
Aurora, ON
Posts 18,678

Re: Security hole ?

Reply Quote

For the normal users you can set the editor property AllowUpload="false".

Make sure only the right people can upload the document/files.

asp.net Chat http://cutesoft.net/ASP.NET+Chat/default.aspx
Web Messenger: http://cutesoft.net/Web-Messenger/default.aspx
asp.net wysiwyg editor: http://cutesoft.net/ASP.NET+WYSIWYG+Editor/default.aspx
asp wysiwyg html editor: http://cutesoft.net/ASP
asp.net Image Gallery: http://cutesoft.net/ASP.NET+Image+Gallery/default.aspx
Live Support: http://cutesoft.net/live-support/default.aspx

06-09-2004, 3:24 PM 968 in reply to 967

alakazoo
Joined on 06-09-2004
Montreal
Posts 10

Re: Security hole ?

Reply Quote

Is it not better to disallow any upload of asp file to prevent any trouble ?

Kazoo

06-09-2004, 3:33 PM 969 in reply to 967

Adam
Joined on 09-23-2003
Aurora, ON
Posts 18,678

Re: Security hole ?

Reply Quote

Kazoo,

Yeah, that makes sense.

But if some developers want to use the document downloadable files button as a mimi file manager, they will need this feature.

asp.net Chat http://cutesoft.net/ASP.NET+Chat/default.aspx
Web Messenger: http://cutesoft.net/Web-Messenger/default.aspx
asp.net wysiwyg editor: http://cutesoft.net/ASP.NET+WYSIWYG+Editor/default.aspx
asp wysiwyg html editor: http://cutesoft.net/ASP
asp.net Image Gallery: http://cutesoft.net/ASP.NET+Image+Gallery/default.aspx
Live Support: http://cutesoft.net/live-support/default.aspx

06-09-2004, 4:08 PM 972 in reply to 969

alakazoo
Joined on 06-09-2004
Montreal
Posts 10

Re: Security hole ?

Reply Quote

then you can add a propertie like "allowUpload"

that could be "UploadDeniedFiles"

Kazoo

06-10-2004, 5:55 PM 998 in reply to 972

Adam
Joined on 09-23-2003
Aurora, ON
Posts 18,678

Re: Security hole ?

Reply Quote

That's a good suggestion.

I've put it into the feature request list.

We will add this feature to the editor in the future release.

asp.net Chat http://cutesoft.net/ASP.NET+Chat/default.aspx
Web Messenger: http://cutesoft.net/Web-Messenger/default.aspx
asp.net wysiwyg editor: http://cutesoft.net/ASP.NET+WYSIWYG+Editor/default.aspx
asp wysiwyg html editor: http://cutesoft.net/ASP
asp.net Image Gallery: http://cutesoft.net/ASP.NET+Image+Gallery/default.aspx
Live Support: http://cutesoft.net/live-support/default.aspx

View as RSS news feed in XML