Security and IdHTTPServer

Article View: borland.public.cppbuilder.internet.socket

Article #4330

Back to borland.public.cppbuilder.internet.socket Previous Next

#4330

From: Frank Gruber
Date: Thu, 10 Feb 2005 15:12

16 lines
1506 bytes

Found the following line in TIdCustomHTTPServer.DoExecute
(No difference between V9 and V10):

sInputLine := IOHandler.ReadLn;

What about IdHTTPServer and security.
That line beside some others is a good starting point for DOS attacks.
Does the Indy team also focus on security issues, or is it generally not 
advised to make a IdHTTPServer based application accessible from the 
Internet. Maybe putting a reverse proxy in front of it would solve some 
of the issues.

Any comments and suggestions are welcome.

Thank's.
Frank.

Technical Details

Message-ID: <420b79ec@newsgroups.borland.com>

Path:

arc1-ca.pugleaf.net!g2news1.google.com!news4.google.com!news.glorb.com!nntp-server.pubsub.com!zen.net.uk!dedekind.zen.co.uk!news-out.newsgroups.com!propagator2-sterling.newsfeeds.com!news-in.newsfeeds.com!in.nntp.be!caladan.landsraad.net!newsgroups.borland.com!not-for-mail

Show Full Headers

Complete Article Headers

X-Google-Thread: 11508e,6ec7339290d7f076,start
X-Google-Attributes: gid11508e,public
X-Google-Language: ENGLISH,ASCII-7-bit
Date: Thu, 10 Feb 2005 16:12:46 +0100
From: Frank Gruber <HVFDMIPUMFPS@spammotel.com>
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
X-Accept-Language: de-DE, de, en-us, en
MIME-Version: 1.0
Newsgroups: borland.public.cppbuilder.internet.socket
Subject: Security and IdHTTPServer
Content-Type: text/plain; charset=ISO-8859-15; format=flowed
Content-Transfer-Encoding: 7bit
NNTP-Posting-Host: 217.88.125.113
Message-ID: <420b79ec@newsgroups.borland.com>
X-Trace: newsgroups.borland.com 1108048364 217.88.125.113 (10 Feb 2005 07:12:44 -0800)
Lines: 16
Path: arc1-ca.pugleaf.net!g2news1.google.com!news4.google.com!news.glorb.com!nntp-server.pubsub.com!zen.net.uk!dedekind.zen.co.uk!news-out.newsgroups.com!propagator2-sterling.newsfeeds.com!news-in.newsfeeds.com!in.nntp.be!caladan.landsraad.net!newsgroups.borland.com!not-for-mail