[Xitami] http file transfer (temp folders)

[Charles Schmidling]

At the risk of being redundant, I was checking out an IE security exploit
(from a security site) and found out some disturbing things.

Since I maintain multiple profiles on this Win98SE machine, I don't
generally look in the "Temporary Internet Files" folder in C:\Windows
directory.  Each profile maintains its own Temp Folders and clearing them
from the IE option only clears that set of folders.  However, the corrupted
download files were found in the Windows/Temporary Internet Files folders.
Logging into the "NONE" account (hitting cancel at logon) didn't gain me
access to these folders.  Turns out, this account looks in "Local
Settings/Temporary Internet Files" folders.  It seems IE can store files in
both your current profiles Temp folder and the main one in c:\windows,
depending on who's scripting the code.

So to recap - you can find the "Temporary Internet Files" folder in:
c:\windows - general downloads
c:\windows\local settings - if you use profiles
c:\windows\profiles\(acctname)    - per each profile
in your sock drawer.

You cannot view any other Temp folder in windows but your own.  You will
need to manually clear some of them in DOS - changing the attrib and going
to each random named folder in Content.IE5 and erasing stuff.  I've found
that killing the appropriate "desktop.ini" file allows you to view that
folder's level in window and deleting it will kill everything under it.

Don't know if this helps you.  It bothers me.

Charles



----- Original Message -----
From: "Nowlin, Dan" <NowlinD@missouri.edu>
To: <xitami@lists.xitami.org>
Sent: Friday, May 23, 2003 9:44 PM
Subject: RE: [Xitami] http file transfer


> I have noticed other servers doing something simular but they put the
> [1] befor the extention where Xatimi puts it at the end.  I thought it
> might be something with the temp folders also so I cleared out every
> temp folder I could find and the downloaded programs folder and then
> tried to download a file that I know I have not tried to download befor
> and it still puts the [1] on the end.
>
> -----Original Message-----
> From: Charles Schmidling [mailto:dscontroller@comcast.net]
> Sent: Friday, May 23, 2003 22:48
> To: xitami@lists.xitami.org
> Subject: Re: [Xitami] http file transfer
>
>
> This appended thing is common my experience from all kinds of sites.
> Haven't figure out why.  Think it has something to do with how IE stores
> the download in the Temporary folders before copying it to where you
> want it. Deleting the brackets doesn't seem to hurt anything.  It's not
> consistent enough to catch the pattern.  Possibility may be downloading
> a file with a duplicate name in the Temp folders.
>
> Just a thought
> Charles
>
>
> --
> Xitami Users Mailing List -- For Xitami support
> To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami