Strange problem with attachment mod!!!

Involved Joined: Sep 07, 2004 Posts: 354 Location: Sweden

Hi

I am using attachment mod in my phpnuke forums and everythigs works fine. The only strange thing that dosn't works fine is when somebody attach a file with extension .rar and other wants to get this file it give you a file named "module.php" or sometimes as "module.html" insted of FILENAME.rar !!!

Does anyone please know what is wrong!!!

I am using ver. 2.3.11 now and I had the same problem with older ver.

Best Regards

Posted: Sun Jun 19, 2005 4:48 pm

The module is specifically designed to prevent people from attaching .php .html and other executable (by your server) files as a security measure to ensure that code cannont be arbitrarily executed by your website.

This is a critical security feature!

Without it, a hacker could use the attach mod feature to have your website do something like wipe out all of your files, or worse, give him super user permissions where he could do even more damage.

There are a list of permissioned file types and a control panel to manage what types of files are restricted/approved in your forums admin screen.

Users should always ZIP or RAR files for security reasons.

Posted: Sun Jun 19, 2005 4:58 pm

64bitguy, thanks

But in the panel the RAR file is approved allready. zip too.

When you click on the attached file and it is a .rar file it gives you a module.php file. Do you know why?

Posted: Sun Jun 19, 2005 6:14 pm

Can you point me to where you are seeing this.

Feel free to PM it to me if you want.

Thanks

Posted: Sun Jun 19, 2005 6:29 pm

64bitguy,

I sent you a pm now.

Thanks for helping.

Posted: Sun Jun 19, 2005 6:36 pm

Hi

I checked all of the attachments in that thread. I didn't have any problems with any of them.

What exactly is it doing when you click on the attachment?

Posted: Sun Jun 19, 2005 7:41 pm

I think this issue happens when people use older versions of IE

I had reports of this before as well and was able to duplicate the issue when using an older version of IE

Posted: Mon Jun 20, 2005 3:24 am

64bitguy,

Yes. When I click on a attached RAR-file. And I've asked around others if they have this problem and some have and other don't. Just like you and me. Strange, isn't it?

CurtisHancock,

Thank but my ver. of IE is 6.0. and I have latest windows update. I thougt that maybe at my work it happen because of we have router and firewall. But the same thing happen at home too.

Ok it maybe is one of those mysteries of my life Smile

Thank you both for helping so quick and so well.