CMS Made Simple Forums

Posted: **Sat Aug 09, 2008 10:34 am**

Hi,

around 1.2.5, the upload postlet was AFAIR considered a security risk and we were advised to delete the whole folder.

In 1.4 the folder is still in the default installation.

Did I miss anything? Is the postlet now considered secure?

If not, why does CMSMS still ship with it?

Cheers,
Alex

Posted: **Sat Aug 09, 2008 12:52 pm**

faglork wrote: Did I miss anything? Is the postlet now considered secure?

If not, why does CMSMS still ship with it?

Cheers,
Alex

Postlet is still shipped but it is empty (dummy files). This is due to upgrade: empty postlet files overwrite old "risky" versions.

Regards
blast

Posted: **Sat Aug 09, 2008 5:23 pm**

Thanks for clarification!

It would be nice if a corresponding note were included in the release notes.

Cheers,
Alex

CMS Made Simple Forums

Filemanager postlet still considered risky?

Filemanager postlet still considered risky?

Re: Filemanager postlet still considered risky?

Re: Filemanager postlet still considered risky?