A critical security bug in Total.js Eshop + CMS
We have found a critical security bug in FileHandler, this blog contains instructions how to secure your websites.
A critical security bug in Total.js Eshop + CMS
We are really sorry, but this is life. Sometimes we are teachers and sometimes we are students. We found a critical security bug in Total.js Eshop and CMS yesterday. Please follow the instructions below:
- first reinstall Total.js to +v2.2.0 (
npm install total.js
) - check your source-code:
Open yourapp/controllers/default.js
and find a file_read
function and modify it as shown below:
FIX:
Do you have any questions? Contact use via our HelpDesk system.
We apologize for the inconvenience.
Other posts from Total.js Platform
- 2024-04-08How to create REST API using Total.js LessCode
- 2024-04-04Create UI parts visually with the power of Total.js UI Builder
- 2024-04-03Enhance your applications with Total.js v5 proxy functionality
- 2024-04-01March report 2024
- 2024-03-22How to scale your Total.js application with clusterization?
- 2024-03-01February report 2024
- 2024-02-19Building a CRUD API with Total.js: A Step-by-Step Guide
- 2024-02-01January report 2024
- 2024-01-18LessCode app
- 2024-01-16Differences between Total.js v4 and Total.js v5