Re: File Mananger - where are the temp files during xfer?

[Jamie C. <jca...@we...>]

Dave Chimera wrote:
> 
> Awesome dude!
> 
> "Now I see said the blind man as he picked up the hammer and saw" ... Now
> I see why some really large files never made it - I tried to upload a 91mb
> file the other day and I see now that it probably choked because the
> target server (a Linux router) only has 64mb of RAM. Any way to redirect
> that to a file instead?

Not at the moment .. unless you write your own modified version of
the &ReadParseMime function in web-lib.pl
 
> What are the chances of getting some kind of progress meter or a percent
> done or Kb/sec reading into the upload dialogue (or am I pushing the
> envelope with that!)

Not really possible, unfortunately .. this is really something the browser
should display, but few do..

 - Jamie
 
> See, I like *not* having to run an ftp server running on most of the
> machines I run Webmin on, so the file manager is a great way to push files
> up to a box. I really use it a lot.
> 
> Thanks for the upcoming fix!
> 
> --- Jamie Cameron <jca...@we...> wrote:
> > Dave Chimera wrote:
> > >
> > > Question: When uploading to a webmin server, where does the recieving
> > > server build its temp file?
> > >
> > > I have searched the machine during a large transfer  and cannot find
> > it.
> > >
> > > Follow-up question:
> > > If the file transfer (upload) is canceled, how can one be sure
> > whatever
> > > temp file was deleted or it status, location, etc.
> > >
> > > A major improvement would be to add a config option to specify where
> > > uploaded files are temp'd during xfer, and some sort of logging/audit
> > > facility.
> >
> > Actually, they are only kept in memory until the upload is complete,
> > then
> > written to the chosen directory. So there is no possibility of a temp
> > file being left hanging around if an upload is cancelled ..
> >
> > > A potential security problem is that there is no audit trail for file
> > > transfers either up or down using the file manager.
> > >
> > > Scenario:
> > > Malicious sysadmin gets fired, stupid pointy haired boss changes root
> > > login password but has no clue about webmin and doesn't realize his
> > > sysadmin used a different user/pass for webmin. Evil sysadmin uploads
> > and
> > > downloads massive amounts of data quietly, or destroys data using
> > webmin
> > > file manager.
> >
> > The file manager doesn't really do any logging at the moment, though it
> > could
> > be setup to do so as an option. I don't think it should be on by default
> > though, as the amount of information logged could be massive .. but I
> > will
> > add the option to the next release of webmin.
> >
> >  - Jamie