Page 1 of 1

Serv-U and secure

PostPosted: 18. July 2006 11:35
by RobertSmith
Hi and thx for a great product.

Sorry for my poor German it was over 15 year since I study German so I will put my question in English, hope its ok :)

I’m running Serv-U for FTP is there anyway to get a "green lamp" instead of the yellow “unknown” on the security page or is that opportunity only if you use FileZilla?

Best regards
Robert (Sweden)

PostPosted: 18. July 2006 11:39
by deepsurfer
I’m running Serv-U for FTP is there anyway to get a "green lamp" instead of the yellow “unknown” on the security page or is that opportunity only if you use FileZilla?

The status-script look for port 21 and look for filezilla process, the yellow lamp says you that an FTPserver is running but without the filezilla-process.

you can try to editing the statusscript-component. (exe file) for change the filezilla-process to ServU process.

PostPosted: 18. July 2006 12:12
by Wiedmann
The status-script look for port 21

Yes.

and look for filezilla process,

No.

the yellow lamp says you that an FTPserver is running but without the filezilla-process.

No. The Script have found a ftp daemon, but can't log in with the predefined user/password.

you can try to editing the statusscript-component. (exe file)

IMHO RobertSmith is talking about the security script ("\xampp\security\htdocs\security.php") and not about the control panel.

for change the filezilla-process to ServU process.

In the security script he can change the user/password for the test.

PostPosted: 18. July 2006 12:14
by deepsurfer
ahh... i see... ok. thx Wiedmann for rectification.

PostPosted: 19. July 2006 07:44
by RobertSmith
Wiedmann wrote:IMHO RobertSmith is talking about the security script ("\xampp\security\htdocs\security.php") and not about the control panel.

for change the filezilla-process to ServU process.

In the security script he can change the user/password for the test.
Thx for your quick answers. Just to make sure i understand right and I also have one more question.

I didn't succeed to login to FTP @ localhost (yellow with localhost) so i had to use external url. Is this OK?

Here is my code i have added some echo just for my testing.
Code: Select all
            if ($command == "ftp") {
echo "Connect to firewall, ";
//          if (($handle = @fsockopen($host, 21, $errno, $errstr, $timeout)) == true) {
            if (($handle = @fsockopen("ftp.example.com", 21, $errno, $errstr, $timeout)) == true) {
                  @fclose($handle);
echo "Open a session to ftp, ";
//                $conn_id = ftp_connect("127.0.0.1");
                  $conn_id = ftp_connect("ftp.example.com"");
//                $login_result = @ftp_login($conn_id, "newuser", "wampp");
                  $login_result = @ftp_login($conn_id, "USER", "PASS");
                  if (!$conn_id || !$login_result) {
                     $status = 0;
echo "Ftp-connect failed!";
                  } else {
echo "Connected";
                     $status = 1;
                     ftp_quit($conn_id);
                  }
               } else {
                  $notrun = 1;
               }
            }
Result:
UNSECURE: If the FileZilla FTP server was started, the default user 'newuser' with password 'wampp' can upload and change files for your XAMPP webserver. So if you enabled FileZilla FTP you should set a new password for user 'newuser'.

After changing the login back to "original" code.
Code: Select all
                 $login_result = @ftp_login($conn_id, "newuser", "wampp");
//               $login_result = @ftp_login($conn_id, "USER", "PASS");;
Result:
SECURE: The FileZilla FTP password was changed.

So this is the working code for me (only host is changed)
Code: Select all
            if ($command == "ftp") {
            if (($handle = @fsockopen("ftp.example.com", 21, $errno, $errstr, $timeout)) == true) {
                  @fclose($handle);

                  $conn_id = ftp_connect("ftp.example.com"");
                  $login_result = @ftp_login($conn_id, "newuser", "wampp");
                  if (!$conn_id || !$login_result) {
                     $status = 0;
                  } else {
                     $status = 1;
                     ftp_quit($conn_id);
                  }
               } else {
                  $notrun = 1;
               }
            }
Is there information about this in FAQ or documentation in English or is forum the right place for this type of question?