[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Phpgroupware-users] The anonymous user problem...
From: |
Marco Gaiarin |
Subject: |
[Phpgroupware-users] The anonymous user problem... |
Date: |
Thu, 6 Nov 2003 15:55:23 +0100 |
User-agent: |
Mutt/1.5.4i |
We have just dissected the problem that arises when you setup the guest
user that use sitemgr to run the phpwebhosting application.
A malicious user can use the phpwebhosting application and fill the
database and filesystem with file.
Can i:
1) put some quota on user, preventing guest user from fill the FS
2) disable the guest user to upload file at all
3) make some script that delete file.
4) ...
so, some sort of quick hack to prevent this?!
--
dott. Marco Gaiarin GNUPG Key ID: 240A3D66
Associazione ``La Nostra Famiglia'' http://www.sv.lnf.it/
Polo FVG - Via della Bontà , 7 - 33078 - San Vito al Tagliamento (PN)
gaio(at)sv.lnf.it tel +39-0434-842711 fax +39-0434-842797
Proteggiamo l'innovazione in Europa: no ai brevetti software
http://swpat.xsec.it/
- [Phpgroupware-users] The anonymous user problem...,
Marco Gaiarin <=