Comments on: Security patch for SWX PHP 1.0/1.0.1

By: aral

aral — Tue, 20 Nov 2007 14:14:55 +0000

Hi Dani,

You’re right, that is the idea and the current version falls short of the mark. I’ll make sure that the next version of the deployment bundle is even more ~~indecent~~ naked

By: dani

dani — Tue, 20 Nov 2007 14:07:49 +0000

Hi Aral,

I’m a little bit confused about the deployment bundle. Why is the service explorer and analyzer included? I’m also getting the “fancy” start-page. Leaving all the services open for everyone isn’t pretty safe, isn’t it?

I used this link:
http://swxformat.org/downloads/swx_php_deployment_bundle_1.01.zip

I understand a deployment bundle as a naked version of swx, without any debugging tools and no frontend!?

By: mxmotion

mxmotion — Sat, 10 Nov 2007 23:31:33 +0000

Hi Aral… i have downloaded the showsource.php.zip but i can’t open it because is password protected.
can you help me?

By: aral

aral — Thu, 27 Sep 2007 16:04:30 +0000

Hi Magirus,

*Three* typos in one URL to be exact! Wow, so that’s what happens when you work from the airport. Thanks so much for pointing it out — the link should work now.

By: Magirus

Magirus — Thu, 27 Sep 2007 15:49:41 +0000

There seems to be a typo in the link to the patch file. Can’t download it. Could you please correct the link.
Thanks al lot

By: Nederflash

Nederflash — Thu, 27 Sep 2007 15:48:25 +0000

SWX PHP 1.0/1.01 veiligheids patch…

Wanneer je SWX PHP 1.0 of 1.01 op een publieke server hebt gezet (Niet de SWX PHP Deployment Bundle) download dan de showsource.php.zip en unzip die in de /php/services/_idvr/ folder. Dit stopt het potentieel exploitabel probleem met het showsource.php…