summaryrefslogtreecommitdiff
path: root/doc/source/config.rst
diff options
context:
space:
mode:
Diffstat (limited to 'doc/source/config.rst')
-rw-r--r--doc/source/config.rst8
1 files changed, 4 insertions, 4 deletions
diff --git a/doc/source/config.rst b/doc/source/config.rst
index 4be8db7..7691f89 100644
--- a/doc/source/config.rst
+++ b/doc/source/config.rst
@@ -199,8 +199,8 @@ argument and various information about it in the environment:
199 199
200This feature can be used, for example, to check if an uploaded file contains php 200This feature can be used, for example, to check if an uploaded file contains php
201code, using `vld <https://derickrethans.nl/projects.html#vld>`_, 201code, using `vld <https://derickrethans.nl/projects.html#vld>`_,
202via `a python script <https://github.com/nbs-system/snuffleupagus/tree/master/scripts/upload_validation.py>`__, 202via `a python script <https://github.com/jvoisin/snuffleupagus/tree/master/scripts/upload_validation.py>`__,
203or `a php one <https://github.com/nbs-system/snuffleupagus/tree/master/scripts/upload_validation.php>`__. 203or `a php one <https://github.com/jvoisin/snuffleupagus/tree/master/scripts/upload_validation.php>`__.
204 204
205The upload will be **allowed** if the script returns the value ``0``. Every other 205The upload will be **allowed** if the script returns the value ``0``. Every other
206value will prevent the file from being uploaded. 206value will prevent the file from being uploaded.
@@ -342,7 +342,7 @@ For clarity, the presence of the ``allow`` or ``drop`` action is **mandatory**.
342 because it'll match the deny first. 342 because it'll match the deny first.
343 343
344If you're paranoid, we're providing a `php script 344If you're paranoid, we're providing a `php script
345<https://github.com/nbs-system/snuffleupagus/blob/master/scripts/generate_rules.php>`__ 345<https://github.com/jvoisin/snuffleupagus/blob/master/scripts/generate_rules.php>`__
346to automatically generate hash of files containing dangerous functions, and 346to automatically generate hash of files containing dangerous functions, and
347blacklisting them everywhere else. 347blacklisting them everywhere else.
348 348
@@ -358,7 +358,7 @@ It's currently not possible to:
358 things like this, odds are that you're doing something wrong anyway. 358 things like this, odds are that you're doing something wrong anyway.
359- Hooks on ``echo`` and on ``print`` are equivalent: there is no way to hook one 359- Hooks on ``echo`` and on ``print`` are equivalent: there is no way to hook one
360 without hooking the other, at least 360 without hooking the other, at least
361 `for now <https://github.com/nbs-system/snuffleupagus/issues/190>`__). 361 `for now <https://github.com/jvoisin/snuffleupagus/issues/190>`__).
362 This is why hooked ``print`` will be displayed as ``echo`` in the logs. 362 This is why hooked ``print`` will be displayed as ``echo`` in the logs.
363- Hook `strlen`, since in latest PHP versions, this function is usually 363- Hook `strlen`, since in latest PHP versions, this function is usually
364 optimized away by the compiled. 364 optimized away by the compiled.