Ticket ID: 21644 Creation Date: 5/17/2015 4:57 PM Product: SiteKiosk Classic Windows Attachment: -
TicketType: Support Request Version: 0.0.0 Language: English
Views: 37290 Last Modification Date: 6/15/2015 5:01 PM Platform: Windows
Level: Closed IE: 0.0
Bug Status: Not Fixed User account: Own Account Bug Frequency: About once an hour

Support Request: I found a bug

Reproduction

I was looking to see if there was a way to get access to the files on the computer that had this program running and so I looked around the site that was running on the computer and I remembered this page where you could add files and so I went there and when I got there I clicked on the button (add file) and I typed bar I typed <b>*.*</b> and I got access to all the files on the computer. So you guys need to fix this.

Description

I was looking to see if there was a way to get access to the files on the computer that had this program running and so I looked around the site that was running on the computer and I remembered this page where you could add files and so I went there and when I got there I clicked on the button (add file) and I typed bar I typed <b>*.*</b> and I got access to all the files on the computer. So you guys need to fix this.

Answer: (2)
Re: I found a bug 5/17/2015 4:58 PM
I meant *.* not <b>*.*</b>
Re: I found a bug 5/18/2015 4:54 PM
This is not a bug but a dedicated behavior when allowing uploading or saving files.
Within the "open / save as" dialog from Windows SiteKiosk can just hide certain drive letters but as SiteKiosk has no further/direct influence to this dialog from the Windows OS SiteKiosk can’t perevent displaying all files and folders using “*.*” or even “c:\” in the dialog.

But even with the default settings the access to the hard drive is restricted by NTFS user (access) right settings when using the SiteKiosk user account (System-Security-Manager "Protected" / SiteKiosk "Auto Start" mode).
https://www.provisio.com/helpconsole/SiteKiosk%20Help/en-US/advanced.htm

If necessary you can set further restrictions using the System-Security-Manager (-->Customized-->Folder access) or change the SiteKiosk configuration to block certain dialogs completely (-->Access/Security--> Block system critical windows & dialog boxes-->Settings).
https://www.provisio.com/helpconsole/SiteKiosk%20Help/en-US/windows___dialoge.htm
My Account
Login
Language (Tickets):