Thursday May 25th, 2000
Patterned after the PHP filesystem functions, simple functions such as file read/write and directory create are supported. The code has not yet made it into the nightly build, but they expect it will get in soon.
#3 Re: Re: hrmmmm......
Thursday May 25th, 2000 11:54 AM
You are replying to this message
Again, I'm just worried about the posibility of something being given free reign to my hard drive, simply because its in my "skins directory" or some such.
If the answer is that the scripts only have access to the chrome area, and no further; what will stop a skin from a) filling my hard-drive with millions of tiny, one byte, files (ala an old "Tribble" virus I once wrot^h^h^h^h heard about) b) somehow planting, and running an executable that doesn't have said restrictions (i.e. a "byte-code string" hidden within the skin that gets written to file, then renamed "iAmEvil.exe" and executed. This, if my memory of the aforementioned PHP I/O calls is correct, combined with some intense bitwise operations, is technically possible, albeit quite tricky)