Re: running php-gtk app securely - a suggestion
| From: | Sean Coates | Date: | Fri, 06 Oct 2006 13:14:47 +0000 |
| Subject: | Re: running php-gtk app securely - a suggestion | ||
| References: | 1 | Groups: | php.gtk.general |
| Request: | Send a blank email to php-gtk-general+get-7335@lists.php.net to get a copy of this message | ||
> Any potential issues you could foresee?
Well, since you asked...
> - User has no idea where the files are downloaded from
Nothing Ethereal + 30 seconds wouldn't produce.
> - The location of the temp folder can be random and anywhere you like
Writing files to random places on the disk is really rude.
> - The moment the launcher detects that the php-gtk app is up and running, it
> deletes the temp folder and all the downloaded
It's not very hard to hook the Windows API to prevent this from
happening as you intend. There are plenty of sandboxing tools out there
that would at least help you get around this.
S