• Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other all forums
this forum made possible by our volunteer staff, including ...
Marshals:
  • Campbell Ritchie
  • Liutauras Vilda
  • Bear Bibeault
  • Jeanne Boyarsky
  • Tim Cooke
Sheriffs:
  • Knute Snortum
  • Junilu Lacar
  • Devaka Cooray
Saloon Keepers:
  • Ganesh Patekar
  • Tim Moores
  • Carey Brown
  • Stephan van Hulst
  • salvin francis
Bartenders:
  • Ron McLeod
  • Frits Walraven
  • Pete Letkeman

Enquires about the possibility of running script to write files to web server  RSS feed

 
Ranch Hand
Posts: 91
1
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Dear all,

I am programmer and now writing some java code to write the content to the web server folder.
I have the enquires about the possibility of writing contents to a file to web server if hacker is using jsp with ajax by firefox.
As you know that firefox allows to change the html content or javascripts or ajax of the web page and do post.
 
Saloon Keeper
Posts: 4859
117
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
(I have moved this discussion to the servlets forum, because JSPs should not do any I/O, or contain any Java code to begin with.)

Because it is possible to tamper with client-side requests (with any client, not just Firefox), any data arriving at the server needs to be validated. If that is done properly, nothing should get saved (or written to a file) that is not authorised. So what you describe sounds like faulty server-side coding, possibly a lazy developer only performing client-side validation - which any web security tutorial will tell you is inadequate.
 
With a little knowledge, a cast iron skillet is non-stick and lasts a lifetime.
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
Boost this thread!