Page 1 of 1

security bug? the .js files needs protection.

Posted: Tue Nov 30, 2010 6:58 pm
by rtcg
What is the recommended method to protect the applet_ftp.js file from being viewed from a direct http query?

After setting up the demo, I went to http://mysite.tld/jupload/applet_ftp.js and pulled up the parameters plain as day.

Yes I know that ftp is an insecure protocol and there are ways to hack most anything but I'm hoping to remove the low hanging fruit from the script kiddies.

Re: security bug? the .js files needs protection.

Posted: Fri Dec 10, 2010 7:51 am
by support
You could obfuscate the JavaScript with a tool like:
http://www.javascriptobfuscator.com/default.aspx

But what do you want really protect? FTP login/password? Then see:
http://www.jfileupload.com/products/jfi ... aq.html#36