bug-gnubg
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [Bug-gnubg] Where did all the pictures go?


From: OJOHANS
Subject: RE: [Bug-gnubg] Where did all the pictures go?
Date: Mon, 23 Mar 2009 12:43:23 +0100

Yes!

This is a problem with the wiki. There is a major security hole in the dokuwiki 
system we are using. Pictures uploaded to the wiki must go to a special 
directory where no files are allowed to be executed. (Else, an adversary could 
upload a "special picture" and then execute code in this picture. Quite common 
cracking method.)

However, the dokuwiki system (or is the web server) does not even display 
pictures in such directory if it's running php in CGI mode.

If you need the documentation, try these links:
http://cvs.savannah.gnu.org/viewvc/*checkout*/gnubg/gnubg/doc/gnubg/gnubg.pdf?revision=1.3
http://cvs.savannah.gnu.org/viewvc/*checkout*/gnubg/gnubg/doc/gnubg/allabout.pdf?revision=1.3
(PDF versions)

However, maybe we should close the wiki and display a static documentation 
instead? (for discussion)

-Øystein


>-----Original Message-----
>From: address@hidden 
>[mailto:address@hidden On 
>Behalf Of Erez
>Sent: Monday, March 23, 2009 10:49 AM
>To: address@hidden
>Subject: Re: [Bug-gnubg] Where did all the pictures go?
>
>Sorry for my late response.
>I'm refering to the pictures in the wiki manual, for example:
>http://www.gnubg.org/documentation/doku.php?id=playing_a_game_or_match
> 
>I just found a pdf version on the site so I'm good...
> 
>Erez :)
> 
> 
>
>       ----- Original Message ----- 
>       From: Massimiliano Maini 
><mailto:address@hidden>  
>       To: address@hidden 
>       Sent: Monday, March 16, 2009 5:57 PM
>       Subject: Re: [Bug-gnubg] Where did all the pictures go?
>
>
>       
>address@hidden wrote 
>on 15/03/2009 11:46:11:
>       
>       > Does anyone know why do all the pictures in the 
>documentation are shown as 
>       > broken links? 
>       
>       I can see them, can you provid emore details ? 
>       Which OS are you running ? Which gnubg version ? How do 
>you reproduce the problem ? 
>       
>       MaX.
>
>


-------------------------------------------------------------------
The information contained in this message may be CONFIDENTIAL and is
intended for the addressee only. Any unauthorised use, dissemination of the
information or copying of this message is prohibited. If you are not the
addressee, please notify the sender immediately by return e-mail and delete
this message.
Thank you.




reply via email to

[Prev in Thread] Current Thread [Next in Thread]