File Upload behind a firewall

Discussions of secure PHP coding. Security in software is important, so don't be afraid to ask. And when answering: be anal. Nitpick. No security vulnerability is too small.

Moderator: General Moderators

Post Reply
mattspriggs28
Forum Newbie
Posts: 3
Joined: Tue Apr 28, 2009 4:36 am

File Upload behind a firewall

Post by mattspriggs28 »

Hi,

I have a form on my website which contains a file upload field and works no problem. However, one particular user had a problem uploading a file through the form. After further investigation, we came to the conclusion that it was due to the user being behind a firewall. Is there a way around this or is it just something that we will have to deal with?

Thanks.
User avatar
kaisellgren
DevNet Resident
Posts: 1675
Joined: Sat Jan 07, 2006 5:52 am
Location: Lahti, Finland.

Re: File Upload behind a firewall

Post by kaisellgren »

I have never experienced anything like this myself before. What kind of firewall is (s)he using? A hardware firewall or a software firewall?
mikosiko
Forum Regular
Posts: 757
Joined: Wed Jan 13, 2010 7:22 pm

Re: File Upload behind a firewall

Post by mikosiko »

You can test the same pc out of the regular network using a wireless card?... if the user can upload the file most likely is a firewall issue, then you must check the defined rules in the FW and modify/setup it accordingly.

Miko
User avatar
timWebUK
Forum Contributor
Posts: 239
Joined: Thu Oct 29, 2009 6:48 am
Location: UK

Re: File Upload behind a firewall

Post by timWebUK »

Surely a firewall would not be the issue seeing as the file is being uploaded over HTTP and the user would not even see the site if that was blocked?
User avatar
kaisellgren
DevNet Resident
Posts: 1675
Joined: Sat Jan 07, 2006 5:52 am
Location: Lahti, Finland.

Re: File Upload behind a firewall

Post by kaisellgren »

timWebUK wrote:Surely a firewall would not be the issue seeing as the file is being uploaded over HTTP and the user would not even see the site if that was blocked?
Yeah, it sounds a bit absurd...
User avatar
Eran
DevNet Master
Posts: 3549
Joined: Fri Jan 18, 2008 12:36 am
Location: Israel, ME

Re: File Upload behind a firewall

Post by Eran »

After further investigation, we came to the conclusion that it was due to the user being behind a firewall
It's possible you made a mistake. How did you come to that conclusion?
mikosiko
Forum Regular
Posts: 757
Joined: Wed Jan 13, 2010 7:22 pm

Re: File Upload behind a firewall

Post by mikosiko »

kaisellgren wrote:
timWebUK wrote:Surely a firewall would not be the issue seeing as the file is being uploaded over HTTP and the user would not even see the site if that was blocked?
Yeah, it sounds a bit absurd...
well... that depend of the kind of firewall that you have and how you control the traffic with it... in some FW you can control any kind of traffic including http... in my case I can control the size of download/upload files either using http or ftp... maybe could be a similar situation for the specific user? ... doesn't sound too absurd to me... but then again... I can be wrong :)
Post Reply