Attachments & Viruses

[BetaMax]

If I have a W2k machine running the forums and also has Symantec Corp Ed 8.0 and someone trys to attach a virus using the attachment, will the virus software catch it?

If so, will that effect the forum when it tries to put that msg information into the sql database whilest Symantec is ripping that attachment away to quarentine or deleteing it?

[BetaMax]

Bump

[Steve Machol]

That depends on what Symantec Corp Ed 8.0 does and whether or not is even looks at file attachment as they are coming out of the database.

[filburt1]

Originally posted by Steve Machol
That depends on what Symantec Corp Ed 8.0 does and whether or not is even looks at file attachment as they are coming out of the database.

It still saves the file as a flat file temporarily (that's how PHP file uploads work); if there's an option in the AV scanner to look in that directory constantly for new files then it might work.

[BetaMax]

If it saves it as a flat file tempararly, then our AV software will scan it since we have realtime scanning in place. Now the question is, if that file has a virus, the software will lock the file, and then place it into quarantene(sp?) or delete it. When that takes place, how will that effect the forums since it is now trying to take that file and place it into the sql database, but the file is no longer there since it has either been moved or deleted by the AV software.

[filburt1]

Originally posted by BetaMax
If it saves it as a flat file tempararly, then our AV software will scan it since we have realtime scanning in place. Now the question is, if that file has a virus, the software will lock the file, and then place it into quarantene(sp?) or delete it. When that takes place, how will that effect the forums since it is now trying to take that file and place it into the sql database, but the file is no longer there since it has either been moved or deleted by the AV software.

I have no idea, you'll have to ask Symantec to see what it does. Either way if it makes the file inaccessible in any way quickly enough then PHP won't be able to access it and therefore won't insert it into the database.

[BetaMax]

Heh, I guess one sure way to try is using a test virus code string in a text file and try u/ling it to the forums and see what happens

[BetaMax]

Looks like it is ok.. It just errors out saying it cannot find the file. The AV software deletes it prior to VB putting into the sql db and reports back to the poster that an error has occured. Thought I would pass this along.