The modified php file is part of Jmol 14.2 and 14.3 releases:

https://sourceforge.net/projects/jmol/files/Jmol/Version%2014.2/Version%2014.2.13/

https://sourceforge.net/projects/jmol/files/Jmol-beta/Jmol%2014.3/Jmol%2014.3.13/



On Mon, Mar 23, 2015 at 8:19 AM, Robert Hanson <hans...@stolaf.edu> wrote:

> All developers are advised to replace on any server implementing JSmol
>
> jsmol/php/jsmol.php
>
> with
>
> http://chemapps.stolaf.edu/jmol/jsmol/php/jsmol_php
>
> (with proper filename change back to jsmol.php), as it has a server
> file-reading vulnerability.
>
> Bob
>
> --
> Robert M. Hanson
> Larson-Anderson Professor of Chemistry
> Chair, Department of Chemistry
> St. Olaf College
> Northfield, MN
> http://www.stolaf.edu/people/hansonr
>
>
> If nature does not answer first what we want,
> it is better to take what answer we get.
>
> -- Josiah Willard Gibbs, Lecture XXX, Monday, February 5, 1900
>
>


-- 
Robert M. Hanson
Larson-Anderson Professor of Chemistry
Chair, Department of Chemistry
St. Olaf College
Northfield, MN
http://www.stolaf.edu/people/hansonr


If nature does not answer first what we want,
it is better to take what answer we get.

-- Josiah Willard Gibbs, Lecture XXX, Monday, February 5, 1900
------------------------------------------------------------------------------
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the 
conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Jmol-developers mailing list
Jmol-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/jmol-developers

Reply via email to