More HTMLJunction News...

EZUpload has just been released!

EZUpload allows you to upload files to your server. You can change the files that you allow to be uploaded. After a file has been uploaded then a link is created to view/play/run the uploaded file. A URL is also provided that you can use to copy and paste. The size of the file is also displayed and you have the option to delete the files. You can upload up to five (5) files at once and a progress bar is displayed for large files. You MUST have AspUpload installed on your server.

Download the zip file and read the readme.txt file for installation instructions. No changes are necessary to get it running

Download Now

At 11:45 AM CST today I had my 10,000th download of my EZCodes. The script was EZGuestbook. I believe the count is actually around 20,000 - 25,000, because my scripts are listed in a lot of script directories like Hotscripts, Aspin, and Scripts.com and I have no way of keeping track of all them so I dont even try. Also, I started the count sometime in the fall of 2004 and have only counted those that downloaded directly from HTMLJunction. I was thinking of having a promotion were I would give the person making the 10,000th download some free web space, but I decided that I would give the person making the 100,000th download a free website, including free Web Hosting and Web Design. I have plenty of time to hash out the details, so keep looking for it here!

It seems that someone found a vulnerablility in EZGuestbook where anyone can download the database and view all data including the admin user name and password.
Here are a couple of articles on it.

http://securitytracker.com/alerts/2005/May/1013912.html

http://www.securityfocus.com/bid/13543/info

My solution for this, as with any MS Access database, is to relocate the database outside the web root directory and/or rename the database. Another solution is to apply web access controls to the "datastores" directory, you will probably have to have your web host set this for you. As I said this is true for any MS Access database!

This is a simple poll script with a lot of admin features to manage your polls You can add and delete polls as well as view past polls Check it out here EZPoll

We've got a new look and feel at HTMLJunction. We have cleaned up the way it looks and did away with redundant links. Now all the pages of HTMLJunction can be reached within the drop down menu underneath the logo. The logo itself is new and was made with Paint Shop Pro. We have consolidated the ads into one rotating ad box so each time you view a page you will see a different ad.

We hope you like the new look!