FTPPutFile>Displaying Password

CyberCitizen · Post by **CyberCitizen** » Sat Nov 19, 2005 1:03 pm

Hey Guys & Girls,

Need Ya Help.

I Currently Have An Exe Which Uploads A File To A FTP Server. What I Would Like To Do Is Display The Upload Status, Now The FTP Status Window Works A Treat, However The Issue I Have With That Is That It Displays The PASS Command With The Password Exposed.

Is There Any Way To Hide The Password, However Still Keep The FTP Status Box?

Post by **Marcus Tettmar** » Sun Nov 20, 2005 4:21 pm

FTP is a plain text protocol and the status window shows everything. Only way would be not to show the status window. Version 8.0 will obscure the password.

CyberCitizen · Post by **CyberCitizen** » Sun Nov 20, 2005 11:31 pm

Ok I Know That FTP Is A Plain Text Protocol, However Almost Every FTP Client's That I Have Used Blocks That Password From View Usally With A *

At The Moment I Have A Program That My Clients Are Using That They Can Upload A Large Amount Which Can Take Some Time, However I Do Not Want To Give Them Access To The Status As It Does Display The FTP Password. The Quicker That Issue Can Be Fixed The Better It Would Be For My Clients. Thanks For The Help Support. Is This Fix Available In The Beta? Do Exes Created In The Beta Expire?

-=DJ=- · Post by **-=DJ=-** » Sun Nov 27, 2005 5:15 pm

Hi mtettmar
Even if you hide the password in the status window people that know where to look can get the password and even steal the entire code... it's happening to me as we speak. Loading the script to memory didn't fix the problems we had with version 7.3 and older which put a file in the Temp folder for everyone to read.
Maybe this can be addressed in version 8.0?

Post by **Marcus Tettmar** » Sun Nov 27, 2005 5:26 pm

I'm not sure I follow.

-=DJ=- · Post by **-=DJ=-** » Mon Dec 12, 2005 6:01 pm

mtettmar wrote:I'm not sure I follow.

Can I talk to you in private via Private Message?
I don't feel comfortable posting this in public.

Thanks

Post by **Marcus Tettmar** » Mon Dec 12, 2005 11:11 pm

Email is best. You can send us email via:
http://www.mjtnet.com/contact.htm

CyberCitizen · Post by **CyberCitizen** » Tue Jan 10, 2006 1:59 pm

Has This Issue Been Resolved In Version 8?

I Am Still On MS v7.4.009 However Don't Want To Upgrade Just For That Feature.

Would Like To Know If The Issue Has Been Resolved?

Post by **Marcus Tettmar** » Tue Jan 10, 2006 2:25 pm

Version 8.0 obscures the password in the status box, yes. If you don't wish to upgrade you could just switch off the status box.

CyberCitizen · Post by **CyberCitizen** » Tue Jan 10, 2006 11:42 pm

That Being Said That Is What I Have Had To Do, Which Is Not Good When The User Is Uploading A Large File, Because They Are Unsure What Is Happening In The Background.

I Thought This Would Be More Of A Bug Than A Feature Request, Because Almost Every FTP Client On The Market Hides The Password By Default, Why Is MS Different?

Post by **Marcus Tettmar** » Wed Jan 11, 2006 12:45 am

This is not considered a bug because it does not effect designed operation. FTP is a plain text protocol that is insecure anyway. Furthermore one wonders why a user should be able to upload a file to an FTP server yet not know the password. If security is an issue create an anonymous upload area or special ftp upload area for this/these particular files and separate them from content you do not wish the user to have access to. If you were to automate an ftp upload with vbscript/wsh, or dos batch files you'd have the same issue.

All that said, my main aim is to ensure everyone is happy, so if this is a real show stopper please contact support and we will provide a free update (or custom mod - whichever is simplest).