Hello August!
*** 19.01.20 at 11:44, August Abolins wrote to Martin Foster:
[snip]
AA> Which leads me to the security/bug/weakeness.
AA> If the FILES directory is used for the arriving nodelists, and it is the
AA> same directory for other arriving files such as attachments from other
AA> people, then anyone could arbitrarily send me a nodelist, and its
AA> presence can screw up oxp (just like the presence of the old
AA> nodelist/diffs that I still had in there did).
It wasn't the presence of the old nodlists/diffs that was causing the
problem :)
However, if OpenXP sees a nodelist in the FILES directory, it ignores it
just as it ignores most other files in the FILES directory. The only files
it takes action on are nodediffs/pointdiffs and if any of them are out of
sequence, it just ignores them.
Regards,
Martin
--- OpenXP 5.0.43
* Origin: Bitz-Box - Bradford - UK (2:310/31.3)
|