Quote:
Originally Posted by Salty
[You must be logged in to view images. Log in or Register.]
How many people uploading logs to your site have /tell and /group chat logs?
Sounds like someone could make a front for uploading logs for auction prices and mine data such as account information.
Not many people on this server would think about something like that before uploading their entire log to your server.
Sounds like a potential privacy issue needs to be raised.
|
It is but im a good citizen! and i strip all lines that are not auctions regardless people can remove what they want from the files. its not like im forceing people to upload non auctions shit just. i do this for other reasons since i have people uploading 50 meg log files and i need to save disk space and franky this is a game if your giving out information that is that personal you have other security issues other then this site since the server logs hold all that data also
grep 'auctions' mylog.txt > auctions_only.log
Code:
def create
folder = Rails.root.join('protected', 'logs')
FileUtils::mkdir_p(folder)
name = Digest::MD5.hexdigest("#{Time.now}-#{rand(100)}")
log_name = File.join(folder, "p99_#{name}.log")
@log = Log.create(:ip_address => request.remote_ip, :log => log_name)
`grep 'auction' #{params[:upload][:log].tempfile.path} > #{log_name}`
File.rm(params[:upload][:log].tempfile.path)
Stalker.enqueue('log.process', {:log => log_name, :id => @log.id}, {:ttr => 1200}) unless Rails.env == 'test'
session[:uploaded] = true
redirect_to root_path
end
well thats if you are on linux and infact thats the same line the parser uses