Messages

1

Bug reports / Re: Possible vulnerability

« on: January 14, 2022, 06:42:49 PM »

Thanks both of you for that information. Very much appreciated.

Small question: Where is hfs.events?
I found the wiki article and the 2009 thread. Is it simply a user created file in the directory of where you're launching hfs from?

2

Bug reports / Re: Possible vulnerability

« on: January 14, 2022, 01:00:27 AM »

Bumping this thread because I have also been getting these same logs, from the same IP address, as D.

They seem to be automated bot attacks based on how often I am seeing them. Can we confirm there is no vulnerability in 2.3m?

If not, it does seem unnecessary to have a search function on the home page when only hosting secured files. As LeoNeeson said maybe there could be an option to turn this off?