Article ID: 10061, created on Mar 11, 2011, last review on Apr 25, 2014

  • Applies to:
  • SiteStudio

Applies to

SiteStudio 1.8 and below

Symptoms

SiteStudio Guest Book database may be modifed by requesting psoft.guestbook.GuestBookServ service with specially assembled URL parameters.
 

Resolution

Create 'studio/WEB-INF/classes/psoft/guestbook' directory under SiteStudio root and put attached GuestBookPersistance.class into it. Set file owner:group to 'studio:imaker' and set file permissions to 0440 (-r--r-----). 
 

Attachments

87ad276eb1af5ea9d1c20eee598cc0be 6311ae17c1ee52b36e68aaf4ad066387

Email subscription for changes to this article
Save as PDF