NetTalk Central

NetTalk Web Server => Web Server - Ask For Help => Topic started by: Johan van Zyl on June 23, 2011, 07:05:53 AM

Title: NTWS does not open a file if given absolute path
Post by: Johan van Zyl on June 23, 2011, 07:05:53 AM

Hi all

App is here:
c:\Callcenter\callw.exe

file is here:
c:\callcenter\forms\doc1.pdf

In Browse
if Path is .\forms\doc1.pdf the it opens the file
if Path is c:\callcenter\forms\doc1.pdf then it does not. It says something about Page Not Found etc.

Solutions?

Thx everybody

JVZ

Title: Re: NTWS does not open a file if given absolute path
Post by: Bruce on June 23, 2011, 07:45:49 AM

what is the web folder setting for the app?

It shouldn't be serving _anything_ that is not inside the web folder, unless you're doing a specific handling of the file using a technique like in example 40 (FileDownload). And even that should be done _very_ carefully - ideally using some random hash as a substitute for the file name.

putting a full path name in the URL is _definitely_ a bad idea. That means any user can fetch literally any file on your server. (including password files, data files and so on).

Cheers
Bruce