|
[ This is a test blog, with posts about the development of b2, and comments ]
[ Bugs/suggestions ? Check the Forums ! ]
19.07.01
big security flaw in b2
i had installation problems a few moments ago and i realised that b2install.php is on my monkey.dayzero directory. this can be a great security flaw because it simply overruns all existing settings and posts and makes a new copy of b2. this also means that all accounts are wiped out and the admin user and pass becomes the default.
this is worrying. for those of you who're using b2, please DELETE b2install.php from your ftp server after installation. if you can't remember your password you can upload it back and do a clean reinstallation, or request michel to do this password sending thing. thank you.
alternatively, you can chmod the install.php file to something else (like 755) or request yet another feature on b2: for the install.php file to auto delete itself after installing.
i would request this to be reflected in the b2 readme.
ian @ 17:40:25 778
7 comments, 11 trackbacks, no pingback
:: comments
g - email
deutsch polnisch uebersetzen - englisch uebersetzungsmaschine - online uebersetzer schwedisch - deutsch englisch textuebersetzung - online translator - translate online - online translation - latein uebersetzung - uebersetzungssoftware freeware - online translate - englisch deutsch - franzoesisch deutsch -
ecards - ecard - geburtstagskarten - geburtstagskarte - grusskarte - einladungs grusskarten - einladungstexte - einladungen geburtstag - einladung geburtstag - einladungskarten - einladungskarte - jubilaeum glueckwunsch - danksagungen - danksagung - danksagungskarte - danksagungskarten - dankeskarten - dankeskarte - geburtstagstext - geburtstagsspruch - geburtstagsbilder - geburtstagsgutschein - geburtstagstexte - geburtstagskuchen - geburtstagswuensche - geburtstagsparty - geburtstagssprueche - geburtstagswunsch - geburtstagsspiel -
26.10.04 @ 20:47:56 908
Poker - email - url
I went to the hardware store and bought some used paint. It was in
the shape of a house. I also bought some batteries, but they weren't
included.
-- Steven Wright
Poker http://www.party-poker-x.com
23.11.04 @ 03:42:49 196
Cash Advance - email - url
... I should explain that I was wearing a black velvet cape that was
supposed to make me look like the dashing, romantic Zorro but which
actually made me look like a gigantic bat wearing glasses ...
-- Dave Barry, The Wet Zorro Suit and Other Turning
Points in l'Amour
Cash Advance http://www.cashadvance.be
23.11.04 @ 20:59:03 916
Cash Advance Loan - email - url
When you try to make an impression, the chances are that is the
impression you will make.
Cash Advance Loan http://www.cashadvance.be
24.11.04 @ 13:58:51 624
Direct TV - email - url
A LOW VOTER TURNOUT IS AN INDICATION OF FEWER PEOPLE GOING TO THE POLLS.
- George W Bush, Direct TV http://www.direct-tv-com.com
25.11.04 @ 05:45:42 281
texas hold'em poker - email - url
Buying books would be a good thing if one could also buy the time to read them in: but as a rule the purchase of books is mistaken for the appropriation of their contents. by wsop
26.11.04 @ 07:24:20 350
Phentermine - email - url
We have met the enemy, and he is us.
-- Walt Kelly
Phentermine http://online-prescription-pharmacy.com/Phentermine.htm
29.11.04 @ 03:02:50 168
:: leave a comment
|
