Re: [WebDNA] path traversal

This WebDNA talk-list message is from

2020

It keeps the original formatting. numero = 115087
interpreted = N
texte = 2716It=E2=80=99s actually the oldest running eShop for computer hardware in =Israel launched in 1997 with WebCatalog on Mac OS (PowerPC)and 2-3 years ago moved to CentOS and WebDNA enterprise.The WebDNA runs great will all the ^ and all the other weird stuff and =the site is super solid and fast for decadesAnd also new code is added all the time for the last 22 years and now =this issue also solvedNo reason to change nothing. Same URLs for 22 years is something Google =adore.Yours,Yariv> On 14 Apr 2020, at 12:19, talk@webdna.us wrote:>=20> As far as I know the old (but awesome) e-commerce system is no longer =supported.=20>=20> Every commerce context for that old e-commerce system (orderfile, =addlitems, etc) had path parameter options... (so, for example ==E2=80=98file=3D^=E2=80=99).>=20> =E2=80=98^=E2=80=99 symbol is the path to the globals directory. =(Which is also, I believe, said to be unsupported)=20>=20> I=E2=80=99d suggest finding a new solution.. but if you are sticking =with ancient technology, find a copy of the older docs. Good luck=20>=20>=20>=20> D. Brooke Mobile>=20>> On Apr 14, 2020, at 2:55 AM, talk@webdna.us wrote:>>=20>> =EF=BB=BFA security friend told me about "path traversal=E2=80=9D=20>> https://portswigger.net/web-security/file-path-traversal>>=20>> and told me that the idea that the =E2=80=9CShoppingCarts=E2=80=9D =folder is located usually under a website folder is not a good practice.>> How do i move the creation of files from the directory under the =website forlder to be under the Globals so it=E2=80=99ll be protected =from such kind of attack ?>>=20>> I made such directory elsewhere but didn=E2=80=99t know how to make =WebDNA use it ?>>=20>> I use CentOS 7 and=20>>=20>> Yours,>>=20>> Yariv--------------------------------------------------------->> This message is sent to you because you are subscribed to>> the mailing list talk@webdna.us>> To unsubscribe, E-mail to: talk-leave@webdna.us>> archives: http://www.webdna.us/page.dna?numero=3D55>> Bug Reporting: support@webdna.us>=20> ---------------------------------------------------------> This message is sent to you because you are subscribed to> the mailing list talk@webdna.us> To unsubscribe, E-mail to: talk-leave@webdna.us> archives: http://www.webdna.us/page.dna?numero=3D55> Bug Reporting: support@webdna.us---------------------------------------------------------This message is sent to you because you are subscribed tothe mailing list talk@webdna.usTo unsubscribe, E-mail to: talk-leave@webdna.usarchives: http://www.webdna.us/page.dna?numero=3D55Bug Reporting: support@webdna.us. Associated Messages, from the most recent to the oldest:

Re: [WebDNA] path traversal (Donovan Brooke 2020)
Re: [WebDNA] path traversal (Office 2020)
Re: [WebDNA] path traversal (Office 2020)
Re: [WebDNA] path traversal (Stuart Tremain 2020)
Re: [WebDNA] path traversal (Stuart Tremain 2020)
Re: [WebDNA] path traversal (Donovan Brooke 2020)
[WebDNA] path traversal (Yariv Nachshon 2020)

2716It=E2=80=99s actually the oldest running eShop for computer hardware in =Israel launched in 1997 with WebCatalog on Mac OS (PowerPC)and 2-3 years ago moved to CentOS and WebDNA enterprise.The WebDNA runs great will all the ^ and all the other weird stuff and =the site is super solid and fast for decadesAnd also new code is added all the time for the last 22 years and now =this issue also solvedNo reason to change nothing. Same URLs for 22 years is something Google =adore.Yours,Yariv> On 14 Apr 2020, at 12:19, talk@webdna.us wrote:>=20> As far as I know the old (but awesome) e-commerce system is no longer =supported.=20>=20> Every commerce context for that old e-commerce system (orderfile, =addlitems, etc) had path parameter options... (so, for example ==E2=80=98file=3D^=E2=80=99).>=20> =E2=80=98^=E2=80=99 symbol is the path to the globals directory. =(Which is also, I believe, said to be unsupported)=20>=20> I=E2=80=99d suggest finding a new solution.. but if you are sticking =with ancient technology, find a copy of the older docs. Good luck=20>=20>=20>=20> D. Brooke Mobile>=20>> On Apr 14, 2020, at 2:55 AM, talk@webdna.us wrote:>>=20>> =EF=BB=BFA security friend told me about "path traversal=E2=80=9D=20>> https://portswigger.net/web-security/file-path-traversal>>=20>> and told me that the idea that the =E2=80=9CShoppingCarts=E2=80=9D =folder is located usually under a website folder is not a good practice.>> How do i move the creation of files from the directory under the =website forlder to be under the Globals so it=E2=80=99ll be protected =from such kind of attack ?>>=20>> I made such directory elsewhere but didn=E2=80=99t know how to make =WebDNA use it ?>>=20>> I use CentOS 7 and=20>>=20>> Yours,>>=20>> Yariv--------------------------------------------------------->> This message is sent to you because you are subscribed to>> the mailing list talk@webdna.us>> To unsubscribe, E-mail to: talk-leave@webdna.us>> archives: http://www.webdna.us/page.dna?numero=3D55>> Bug Reporting: support@webdna.us>=20> ---------------------------------------------------------> This message is sent to you because you are subscribed to> the mailing list talk@webdna.us> To unsubscribe, E-mail to: talk-leave@webdna.us> archives: http://www.webdna.us/page.dna?numero=3D55> Bug Reporting: support@webdna.us---------------------------------------------------------This message is sent to you because you are subscribed tothe mailing list talk@webdna.usTo unsubscribe, E-mail to: talk-leave@webdna.usarchives: http://www.webdna.us/page.dna?numero=3D55Bug Reporting: support@webdna.us. Office

DOWNLOAD WEBDNA NOW!

Re: [WebDNA] path traversal

2020

Top Articles:

Related Readings: