Fix Uploadify vulnerability

[GoogleCodeExporter]

Fix Uploadify vulnerability

[GoogleCodeExporter]

I believe r10 fixed these issues. Please test and let me know what you find out.

Original comment by ccagle8 on 1 Jan 2010 at 7:36

[GoogleCodeExporter]

Original comment by ccagle8 on 1 Jan 2010 at 7:44

• Changed state: Fixed

[GoogleCodeExporter]

Original comment by ccagle8 on 1 Jan 2010 at 7:45

• Changed state: Started

[GoogleCodeExporter]

I haven’t tested r10 yet, but it seems to address the 2 currently known 
issues.

Why can’t be check login credentials from any page and only from within the 
admin folder?

Original comment by [email protected] on 2 Jan 2010 at 2:49

[GoogleCodeExporter]

its a problem going back to the define('DOCROOT') problem we had before. Since 
I use 
relative paths for everything, if I include the cookie_functions.php file into 
a file 
that is not in the default location, the relative paths break, making the 
function 
useless. 

Plus, the more i thought about it, those two files weren't really "included" 
files, so 
there was no reason to have them in the /inc/ folder. 

Original comment by ccagle8 on 2 Jan 2010 at 3:44

[GoogleCodeExporter]

I'll be interested to see if this passes your "hack" test Martijn. Let me know 
your 
findings

Original comment by ccagle8 on 3 Jan 2010 at 1:12

[GoogleCodeExporter]

r10 moved around files and stopped direct access to the vulnerable files. 
However, it
again broke uploading through Uploadify.

The problem being the upload-ajax.php file cannot check whether someone is 
logged in
when it is accessed by Uploadify. The fix would be to send along session/cookie 
data
through the flash file. This will be looked at once the new login is working as
mentioned in issue 15.

Original comment by [email protected] on 6 Jan 2010 at 4:41

• Changed title: Fix Uploadify vulnerability
• Changed state: Paused

[GoogleCodeExporter]

Ok, i think i have it with r32. Can you guys please verify? Thanks!

Original comment by ccagle8 on 11 Jan 2010 at 5:57

• Changed state: Started

[GoogleCodeExporter]

Original comment by ccagle8 on 17 Jan 2010 at 11:19

• Changed state: Fixed