" /> Cannot Upload Images to This Site - Genesys CTI User Forum

Author Topic: Cannot Upload Images to This Site  (Read 4337 times)

Offline Genesys CTI Forum Administration Team

  • Administrator
  • Jr. Member
  • *****
  • Posts: 56
  • Karma: 4
Cannot Upload Images to This Site
« on: July 23, 2009, 02:05:06 AM »
Advertisement
Dear all、

as many of you have already noticed: the uploading of attachments with your posts is temporary unavailable. This is a temporary major we had to enforce since yesterday's (7/22) hacking attempt at our site.

In early hours of 7/22, someone (we already have traced the correct (and not fake) IP and are contacting the proper authorities regarding this) has used ability to attach files to the posts to upload a flash file that tried to recover our system passwords. While they were completely unsuccessful at that, they were able to deface our forum.

We are currently looking at the ways to prevents this from happening again and we expect to arrive at a solution within the next few days. Until then, unfortunately, we have to disable the attachments.

We are certain that it is a bit of over-reaction on our part; however, we are certain that you would agree with our decision to do this.

Once again, we are truly sorry for this inconvenience and we are looking forward to returning this functionality by mid of next week.

Thank you very much for your understanding (and patience).

Your faithful Genesys CTI Forum Administration Team

P.S. Anyone has suggestions on how to modify attachments folder on SMF to make it more secure? What chmods?
P.P.S. Tony Tillyer was volunteered to be a personal scapegoat and pinata for this!



Offline cavagnaro

  • Administrator
  • Hero Member
  • *****
  • Posts: 7640
  • Karma: 56330
Re: Cannot Upload Images to This Site
« Reply #1 on: July 23, 2009, 03:55:00 AM »
I've seen on other sites that the uploaded file is not easily localized by putting an URL encripted that only the website knows how to get the file or use tempory paths. Maybe you can modify the file structure/ubication to be in a path not findable except by the user that runs the web service.

tony

  • Guest
Re: Cannot Upload Images to This Site
« Reply #2 on: July 23, 2009, 10:31:09 AM »
[i]<think> It's not the only thing I've been blamed for, this week.... </think>[/i]

;D

Offline n2201

  • Newbie
  • *
  • Posts: 35
  • Karma: 0
Re: Cannot Upload Images to This Site
« Reply #3 on: July 23, 2009, 03:22:03 PM »
How about not requireing zip file and only accept .jpg, .log and .txt files?