#1
  1. Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Apr 2001
    Location
    The Netherlands
    Posts
    328
    Rep Power
    14

    automagically opening a file in MS Word with a Virus


    I just discovered that it's possible to automagically open an application like M$ Word with PHP's headers function. When you force Word to open a file infected with a virus the visitor gets infected with a virus.

    I'm running linux (hehe) so i'm not able to test it but isn't this quite a big security risk???

    Please correct me if i'm wrong, Filip de Waard

    PHP code from a alper at http://www.php.net/manual/en/function.header.php :
    PHP Code:
    header("Content-type: application/x-msword"); header("Content-Disposition: filename="labels.doc"); 
  2. #2
  3. Full Access
    Devshed Regular (2000 - 2499 posts)

    Join Date
    Jun 2000
    Location
    London, UK
    Posts
    2,019
    Rep Power
    17
    Anything made by Microsoft is a security risk.
    Alex
    (http://www.alex-greg.com)
  4. #3
  5. Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Apr 2001
    Location
    The Netherlands
    Posts
    328
    Rep Power
    14
    i agree

IMN logo majestic logo threadwatch logo seochat tools logo