[Problem with hardcoded "message" menu]

 BS> Hmm.. Okay I really can't see how it should affect 
 BS> this.. I mean then you're uploading a QWK package, 
 BS> Maximus is only reading the package, and if it's good 
 BS> then it stores it to the message base..

 BS> Nothing is beeing executed or so..

 BJ> If you have path names enabled on your decompression of 
 BJ> the QWK archive, you can get into trouble....  But 
 BJ> someone would have to think about the path structure to 
 BJ> clobber something.  QWK packets are unpacked relative 
 BJ> to the running BBS control files, so with the right 
 BJ> relative path in a compressed, uploaded QWK mail 
 BJ> packet, you could over write a control file, or 
 BJ> something else equally important....

Oh yes, but default in compress.cfg should be unzip -o -j 
, which ignores subdirs.

 BJ> That's why directory structures need to get suppressed 
 BJ> when unarchiving stuff

 BJ> Also there were issues to make sure QWK uploads 
 BJ> observed the privilage restrictions on users that are 
 BJ> part of the rest of the BBS.....

I see...

Regards,
Bo


--- Maximus/UNIX 3.03b