[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Mldonkey-users] minor bug in allowed_commands?
From: |
MLdonkey |
Subject: |
Re: [Mldonkey-users] minor bug in allowed_commands? |
Date: |
Thu, 13 Mar 2003 23:44:25 +0100 |
> But now I wonder if this feature is really secure... If somebody gains
> access to your mldonkey, won't he be able to change the value of the
> allowed_commands option to execute whatever he wants?
No, I think there is no command to modify this option. Since its type
is a list, a function to convert it to/from a string must be defined
to be able to modify it at runtime. Until now, only allowed_ips has
these converters. Anyway, maybe it is worth adding 'unmodifiable
options' to mldonkey for security reasons...
- MLDonkey