SID-00895: Automatic execution of attachments or local files

Status:	Answered	TWiki version:	5.0.0	Perl version:
Category:	CategoryBrowser	Server OS:	centos 5	Last update:	15 years ago

Is there a way to create a link that will open a file with the windows default program?

I have a few files that i would like to execute from a link on our intranet.

1. Batch files 2. .VNC connection files -- Launches VNC with all settings.

Do I need a plugin? Can the files be on the file server or do they have to be attached?

Thanks for your help.

-- ScottGutman - 2010-07-13

Discussion and Answer

Do you want to execute files on the TWiki server or on the local machine? In either case it is a BIG security issue. Imagine if you could click on a .bat file anywhere on the internet and it gets executed on your local machine?

Look into adding custom Interwiki rules, such as Bugs:1234. See InterwikiPlugin

You can also define additional protocols your browser supports besides http, https, ftp, etc. See {LinkProtocolPattern} in TWiki's configure.

-- PeterThoeny - 2010-07-13

My goal is really to make shortcuts to files and avoid user navigation of the network drives. Instead of having a user open "my computer" --> navigate to the network drive --> and double click on a file, I wanted to make a link. If the local computer does not have the ability or permissions to run the file, then the link would fail.

I do see the security issues though. Do you have any suggestions?

-- ScottGutman - 2010-08-03

Use the file:// link. Drag & drop a directory from your network drive to your browser. Copy that URL to TWiki. If you want to share that with other users you need to make sure all users have the same drive letters assigned to the network drive.

For easy access, define a interwiki rule to your network drive folders. For example if you have marketing docs in a certain folder, define a Marketing:path/to/file.doc rule. See InterwikiPlugin.

-- PeterThoeny - 2010-08-03

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.