IlohaMail.org |  Demo |  Bugs |  DocEngine |  Forum |  Store [Log In]

Forums

Important Note: These forums are being phased out in favor of the mailing lists.

For installation/admin issues, please use the users mailing list
For internationalization/development issues, bug reports, features requests please use the testers mailing list

You may also contact the author directly using the contact form

Forums > Feature Requests & Bug Reports

[ New Thread] [ Reply to this thread]


"/" in username causes uploads directory errors Reply To: [ this thread] [ this post] [ as branch]
Posted by dlai on 2002-09-27 06:11:27 Edit
if a username has a "/" in it, example: acme/joe
then when the user logs in, the failure to mkdir "../uploads/$username.$server"
causes an Invalid uploads directory error

Thats because the "/" is being treated as a directory delimiter in unix

A reasonable workaround is to replace all "/" characters with some other
character. better yet: md5hash the username and server to get some token
that can be the directory name.

This also brings up some security issues, like if a user logs in as
"../../../etc/httpd/conf/httpd" server "conf" or something like that and
try to make the system overwrite some important file. well you get the idea...


Re: "/" in username causes uploads directory errors Reply To: [ this thread] [ this post] [ as branch]
Posted by ryochiji on 2002-09-27 20:14:44 Edit
>"/" in username causes uploads directory errors

Thanks for pointing that out. It actually affects all directories and would cause more prominent issues if the file-based backend is used. Fixes are in CVS. Using an md5 hash seemed like a good idea in terms of security, but I decided to simply remove the slashes to maintain backwards compatibility with existing account data.

Also, I realized that user names and host names were case sensitive, so I fixed that as well.


Re: "/" in username causes uploads directory errors Reply To: [ this thread] [ this post] [ as branch]
Posted by rjs on 2002-10-26 14:36:38
Modified on 2002-10-26 14:36:59
Edit
You shouldn't have '/' in a username anyway. That's just unconventional and, as seen here, cuases all kinds of headaches down the road.

Just my .02 cents
1 replies to this post

Re: "/" in username causes uploads directory errors Reply To: [ this thread] [ this post] [ as branch]
Posted by Anonymous on 2007-06-23 15:51:25 Edit
Hello! Good Site! Thanks you! ibjjfqbzda

Re: "/" in username causes uploads directory errors Reply To: [ this thread] [ this post] [ as branch]
Posted by Anonymous on 2007-06-23 15:51:12 Edit
Hello! Good Site! Thanks you! sqwsmjatcmsji

Re: "/" in username causes uploads directory errors Reply To: [ this thread] [ this post] [ as branch]
Posted by Anonymous on 2007-06-23 15:51:15 Edit
Hello! Good Site! Thanks you! xbavessucw

Re: "/" in username causes uploads directory errors Reply To: [ this thread] [ this post] [ as branch]
Posted by Anonymous on 2007-06-23 15:51:15 Edit
Hello! Good Site! Thanks you! wrwppebixe

Re: "/" in username causes uploads directory errors Reply To: [ this thread] [ this post] [ as branch]
Posted by Anonymous on 2007-06-23 15:51:21 Edit
Hello! Good Site! Thanks you! smtkpeqjwqusi