upload extension

https://www.phpbb.com/ideas/
Post Reply
Author:
eunaumtenhoid
Posted:
Sat Jan 05, 2019 1:38 am
Rating:
Status:
New
User avatar
eunaumtenhoid
Registered User
Posts: 844
Joined: Wed Jun 03, 2009 12:46 am
Location: ????

upload extension

Post by eunaumtenhoid » Sat Jan 05, 2019 1:38 am

the extension upload extension is PHPBB default

https://github.com/BoardTools/upload
My translations of the extensions for Brazilian Portuguese
https://github.com/phpBBTraducoes

User avatar
GanstaZ
Registered User
Posts: 804
Joined: Wed Oct 11, 2017 10:29 pm
Location: Zverse

Re: upload extension

Post by GanstaZ » Sat Jan 05, 2019 1:56 am

One click system will be available in the future version.
"When answer lies in the question,.. question becomes redundant!"

User avatar
warmweer
Registered User
Posts: 2011
Joined: Fri Jul 04, 2003 6:34 am
Location: Van Allen Belt ... well actually Belgium

Re: upload extension

Post by warmweer » Sat Jan 05, 2019 8:35 am

eunaumtenhoid wrote:
Sat Jan 05, 2019 1:38 am
the extension upload extension is PHPBB default

https://github.com/BoardTools/upload
And the Idea is?
The one click system Ganstaz mentioned?

The way you formulate it implies that there is an extension to upload extensions and that it is, or should be, a default feature.
A bug is a feature that hasn't made it to the manual (yet)

User avatar
rubencm
Development Team Member
Development Team Member
Posts: 78
Joined: Fri Oct 05, 2007 2:24 pm
Location: Spain

Re: upload extension

Post by rubencm » Sun Jan 20, 2019 11:39 pm

I have been thinking, and maybe this isn't a very good idea.
I have seen that download backups have been disabled for security reasons, adding this allows administrators to execute any code on the forums which is worst probably.

User avatar
Lumpy Burgertushie
Registered User
Posts: 66147
Joined: Mon May 02, 2005 3:11 am
Contact:

Re: upload extension

Post by Lumpy Burgertushie » Mon Jan 21, 2019 1:00 am

not sure what you are talking about.

rubencm wrote:
Sun Jan 20, 2019 11:39 pm
adding this allows administrators to execute any code on the forums
if you mean that any admin can make a download then that is not correct. the standard admin permissions is, by default, set to no for downloading and restoring database backups.

also, if you can not trust your admins to not mess with your board then why are they admins in the first place.?

robert
I am available for custom work on a donation basis. Please send me a PM with your needs.

Premium phpBB 3.2 Styles by PlanetStyles.net

OK, so what's the speed of dark?

User avatar
thecoalman
Community Team Member
Community Team Member
Posts: 3115
Joined: Wed Dec 22, 2004 3:52 am
Location: Pennsylvania, U.S.A.
Contact:

Re: upload extension

Post by thecoalman » Mon Jan 21, 2019 7:40 pm

Lumpy Burgertushie wrote:
Mon Jan 21, 2019 1:00 am
not sure what you are talking about.
The feature being requested would allow an admin to upload extensions through the ACP thus someone with Admin access could upload any php code.

also, if you can not trust your admins to not mess with your board then why are they admins in the first place.?
The problem is not necessarily people you may trust but compromised accounts. I personally have absolutely no need for such features so for me being able to upload php code and dump the database through the ACP is an unnecessary risk.

User avatar
GanstaZ
Registered User
Posts: 804
Joined: Wed Oct 11, 2017 10:29 pm
Location: Zverse

Re: upload extension

Post by GanstaZ » Mon Jan 21, 2019 9:14 pm

Us i understand it based on some info i have seen, this will be a core future that will let one to activate and update extensions from cdb with all dependencies that come with extension throw acp.
"When answer lies in the question,.. question becomes redundant!"

User avatar
david63
Registered User
Posts: 15938
Joined: Thu Dec 19, 2002 8:08 am
Location: Lancashire, UK
Name: David Wood
Contact:

Re: upload extension

Post by david63 » Mon Jan 21, 2019 9:25 pm

GanstaZ wrote:
Mon Jan 21, 2019 9:14 pm
this will be a core future that will let one to activate and update extensions from cdb
I don't think that is 100% correct. Yes it is a core feature, but it will allow an Admin to upload extensions (not sure about styles and languages) from a repository that is configurable in the ACP. So it would be possible to add a "rogue" repository with what appear to be extensions.
David
Remember: You only know what you know and - you don't know what you don't know!
My CDB Contributions | How to install an extension
I will not be accepting translations for any of my extensions in Github - please post any translations in the appropriate topic.
No support requests via PM or email as they will be ignored

User avatar
GanstaZ
Registered User
Posts: 804
Joined: Wed Oct 11, 2017 10:29 pm
Location: Zverse

Re: upload extension

Post by GanstaZ » Mon Jan 21, 2019 9:28 pm

Well.. only development team can answer this. We don't know how, what, when or why, but seems to be like something in wordpress. As we lack on info there's nothing more to add or speculate.
"When answer lies in the question,.. question becomes redundant!"

User avatar
david63
Registered User
Posts: 15938
Joined: Thu Dec 19, 2002 8:08 am
Location: Lancashire, UK
Name: David Wood
Contact:

Re: upload extension

Post by david63 » Mon Jan 21, 2019 9:47 pm

GanstaZ wrote:
Mon Jan 21, 2019 9:28 pm
Well.. only development team can answer this. We don't know how, what, when or why, but seems to be like something in wordpress. As we lack on info there's nothing more to add or speculate.
Load up 3.3 from Git to see how it works
David
Remember: You only know what you know and - you don't know what you don't know!
My CDB Contributions | How to install an extension
I will not be accepting translations for any of my extensions in Github - please post any translations in the appropriate topic.
No support requests via PM or email as they will be ignored

Post Reply

Return to “phpBB Ideas”