• Post Reply Bookmark Topic Watch Topic
  • New Topic

Enquires about the possibility of running script to write files to web server  RSS feed

 
Raymond Chiu Wing Hing
Ranch Hand
Posts: 91
1
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Dear all,

I am programmer and now writing some java code to write the content to the web server folder.
I have the enquires about the possibility of writing contents to a file to web server if hacker is using jsp with ajax by firefox.
As you know that firefox allows to change the html content or javascripts or ajax of the web page and do post.
 
Tim Moores
Saloon Keeper
Posts: 4034
94
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
(I have moved this discussion to the servlets forum, because JSPs should not do any I/O, or contain any Java code to begin with.)

Because it is possible to tamper with client-side requests (with any client, not just Firefox), any data arriving at the server needs to be validated. If that is done properly, nothing should get saved (or written to a file) that is not authorised. So what you describe sounds like faulty server-side coding, possibly a lazy developer only performing client-side validation - which any web security tutorial will tell you is inadequate.
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
Boost this thread!