"Script" in alias or directory name is bad

Phoca Download - download manager
Bakual
Phoca Newbie
Phoca Newbie
Posts: 2
Joined: 14 Aug 2011, 18:56
Contact:

"Script" in alias or directory name is bad

Post by Bakual »

I just figured out that if you have a directory name or an alias like in my case "ScriptureLink", the download will refuse to work and tells the user that the access to this page is restricted (403 error). The download still works if you strip away the alias from the URL so only the filenumber is left for the id.
The problems seems to be the word "script". If you strip this, everything works again.

The problem is when downloading the file. And if you want to upload a file to a directory with "script" in its name, it fails as well.

Probably a bug related to some safety checks to avoid script intrusion
User avatar
Jan
Phoca Hero
Phoca Hero
Posts: 49144
Joined: 10 Nov 2007, 18:23
Location: Czech Republic
Contact:

Re: "Script" in alias or directory name is bad

Post by Jan »

Hi, thank you for this info, I will take a look at it, the word can be checked by a lot of different parts of Joomla!, I will take a look at it.

Jan
If you find Phoca extensions useful, please support the project
Post Reply