Serv-U and secure

Problems with the Windows version of XAMPP, questions, comments, and anything related.

Serv-U and secure

Postby RobertSmith » 18. July 2006 11:35

Hi and thx for a great product.

Sorry for my poor German it was over 15 year since I study German so I will put my question in English, hope its ok :)

I’m running Serv-U for FTP is there anyway to get a "green lamp" instead of the yellow “unknown” on the security page or is that opportunity only if you use FileZilla?

Best regards
Robert (Sweden)
RobertSmith
 
Posts: 2
Joined: 18. July 2006 11:21

Postby deepsurfer » 18. July 2006 11:39

I’m running Serv-U for FTP is there anyway to get a "green lamp" instead of the yellow “unknown” on the security page or is that opportunity only if you use FileZilla?

The status-script look for port 21 and look for filezilla process, the yellow lamp says you that an FTPserver is running but without the filezilla-process.

you can try to editing the statusscript-component. (exe file) for change the filezilla-process to ServU process.
chirio Deep
Wie sagte einst der MCP aus Tron auf dem Bildschirm zu schreiben Pflegte
" ... end of communication ... "
User avatar
deepsurfer
AF Moderator
 
Posts: 6440
Joined: 23. November 2004 10:44
Location: Cologne
Operating System: Win-XP / Win7 / Linux -Debian

Postby Wiedmann » 18. July 2006 12:12

The status-script look for port 21

Yes.

and look for filezilla process,

No.

the yellow lamp says you that an FTPserver is running but without the filezilla-process.

No. The Script have found a ftp daemon, but can't log in with the predefined user/password.

you can try to editing the statusscript-component. (exe file)

IMHO RobertSmith is talking about the security script ("\xampp\security\htdocs\security.php") and not about the control panel.

for change the filezilla-process to ServU process.

In the security script he can change the user/password for the test.
Wiedmann
AF Moderator
 
Posts: 17102
Joined: 01. February 2004 12:38
Location: Stuttgart / Germany

Postby deepsurfer » 18. July 2006 12:14

ahh... i see... ok. thx Wiedmann for rectification.
chirio Deep
Wie sagte einst der MCP aus Tron auf dem Bildschirm zu schreiben Pflegte
" ... end of communication ... "
User avatar
deepsurfer
AF Moderator
 
Posts: 6440
Joined: 23. November 2004 10:44
Location: Cologne
Operating System: Win-XP / Win7 / Linux -Debian

Postby RobertSmith » 19. July 2006 07:44

Wiedmann wrote:IMHO RobertSmith is talking about the security script ("\xampp\security\htdocs\security.php") and not about the control panel.

for change the filezilla-process to ServU process.

In the security script he can change the user/password for the test.
Thx for your quick answers. Just to make sure i understand right and I also have one more question.

I didn't succeed to login to FTP @ localhost (yellow with localhost) so i had to use external url. Is this OK?

Here is my code i have added some echo just for my testing.
Code: Select all
            if ($command == "ftp") {
echo "Connect to firewall, ";
//          if (($handle = @fsockopen($host, 21, $errno, $errstr, $timeout)) == true) {
            if (($handle = @fsockopen("ftp.example.com", 21, $errno, $errstr, $timeout)) == true) {
                  @fclose($handle);
echo "Open a session to ftp, ";
//                $conn_id = ftp_connect("127.0.0.1");
                  $conn_id = ftp_connect("ftp.example.com"");
//                $login_result = @ftp_login($conn_id, "newuser", "wampp");
                  $login_result = @ftp_login($conn_id, "USER", "PASS");
                  if (!$conn_id || !$login_result) {
                     $status = 0;
echo "Ftp-connect failed!";
                  } else {
echo "Connected";
                     $status = 1;
                     ftp_quit($conn_id);
                  }
               } else {
                  $notrun = 1;
               }
            }
Result:
UNSECURE: If the FileZilla FTP server was started, the default user 'newuser' with password 'wampp' can upload and change files for your XAMPP webserver. So if you enabled FileZilla FTP you should set a new password for user 'newuser'.

After changing the login back to "original" code.
Code: Select all
                 $login_result = @ftp_login($conn_id, "newuser", "wampp");
//               $login_result = @ftp_login($conn_id, "USER", "PASS");;
Result:
SECURE: The FileZilla FTP password was changed.

So this is the working code for me (only host is changed)
Code: Select all
            if ($command == "ftp") {
            if (($handle = @fsockopen("ftp.example.com", 21, $errno, $errstr, $timeout)) == true) {
                  @fclose($handle);

                  $conn_id = ftp_connect("ftp.example.com"");
                  $login_result = @ftp_login($conn_id, "newuser", "wampp");
                  if (!$conn_id || !$login_result) {
                     $status = 0;
                  } else {
                     $status = 1;
                     ftp_quit($conn_id);
                  }
               } else {
                  $notrun = 1;
               }
            }
Is there information about this in FAQ or documentation in English or is forum the right place for this type of question?
RobertSmith
 
Posts: 2
Joined: 18. July 2006 11:21


Return to XAMPP for Windows

Who is online

Users browsing this forum: No registered users and 116 guests