PDA

View Full Version : Possible to move files/dirs into a write-protected dir


ADDiCT
09-13-2003, 05:13 AM
/folder1/ is CHMOD'ed 555 so users only have read access. they can't make directory's or upload files right into it.

/folder2/ is CHMOD'ed 777 so all access.

if a user uploads a file or makes a directory in /folder2/, he can move it to /folder1/, bypassing the read-only restriction.

PWD
257 "/folder2/" is current directory.
MKD test
257 "test" created.
RNFR test
350 File exists, ready for destination name.
RNTO /folder1/test
250 RNTO command successful.

ioFTPD version: beta 5.0.11 (r)

darkone
09-13-2003, 08:38 AM
Yep.. seems like there was minor bug (it was checking parent's permissions, but ignoring result of this check :))