Brent,

> GetFilename just appends the installation dir if
> necessary.  I was able to rename c:\autoexec.bat and
> ..\testfile.txt

Ouch - my bad. I read too much into it... Good catch! 

> I think we should limit Read/WriteFile to the
> installation directory tree, as well.

I agree. I can't see any benign reason for it to write anywhere but
there.

Kim



-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01
_______________________________________________
DQSD-Devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/dqsd-devel

Reply via email to