|
![]()
If I were to use the following code:
Set Upload = Server.CreateObject("Persits.Upload") -> ASPUPLOAD -> (for uploading files)
Does that pose any security issues for hosting?
The hosting party claims the following... is it true?
鈥淪ome of AspUpload's "risky" features are more dangerous than others. Among the most dangerous are:
路 ActiveX registration. Using this feature, a malicious user can place a trojan-horse ActiveX DLL on the server, register and invoke it with simple ASP script.
路 Directory Listing. This feature allows users to browser around the entire web server's hard drive and download any files.
路 Account impersonation.
路 File deletion and directory removal.
After installing AspUpload on a shared Web server, it is recommended that most or all of the potentially dangerous features be disabled, or at least some of the code samples be deleted from the installation directory.
Is there a securuity threat using the following code: Set Upload = Server.CreateObject("Persits.U...
b1911 Your big news here...
:)! http://www.osoq.com/funstuff/extra/extra...
|
