Php photo gallery TWG | JFUploader | TWG Flash upload | WFU | Forum
https://www.tinywebgallery.com/forum/

strange ?
https://www.tinywebgallery.com/forum/viewtopic.php?f=5&t=1034
Page 1 of 1

Author:  novw [ 11. May 2007, 14:16 ]
Post subject:  strange ?

I discovered something by accident. Some of my pics refused to show up (nothing in Firefox, cross in Explorer). Turns out the original filename end in a . and TWG does not like that ?

i.e. picture..jpg (note: .. one is last in filename, one for the extension)

Author:  TinyWebGallery [ 11. May 2007, 15:53 ]
Post subject: 

this is not a bug - this a build in like that because .. is not allowed in any of my parameters. Many parameters are attached to a pathname and this would then e.g. allow to get into another directory than the one you want to. (e.g. adding .. to the album parameter or the image parameter)

To prevent hackers to break into TWG I have disallowed this everywhere. (detection could be better ;) - but it's better to be 100% secure before missing something ;).)

/Michael

Page 1 of 1 All times are UTC + 1 hour [ DST ]
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/