<<O>>  Difference Topic BruceDawson (r1.20 - 08 Aug 2007 - BruceDawson)


Line: 86 to 86

If this link produces a file with anything other than a plain php and html script, then we have security problems on this site. In other words, if that script is rendered, then we have the security problem. TWiki should not be running scripts from the pub/... area.

META FILEATTACHMENT phpinfo.php.txt attr="" comment="!PhpInfo file - if this works, then we have a security problem on this site." date="1152106622" path="phpinfo.php" size="20" user="BruceDawson" version="1.1"
META FILEATTACHMENT foo.txt attr="" comment="A test file" date="1186576349" path="foo.txt" size="24" user="BruceDawson" version="1.1"
Revision r1.19 - 05 Jul 2006 - 09:39 - BruceDawson
Revision r1.20 - 08 Aug 2007 - 08:32 - BruceDawson