TechSpot

batch file

By heru79
Apr 6, 2006
  1. i am looking for a program so a user can clck on a link and a batch
    file will be automatically downloaded and ran (the "File Download"
    window should not pop up). i have looked around and i can not find one. Just wondering if anyone knew of a program like this
     
  2. Spike

    Spike TS Evangelist Posts: 2,168

    :wave: Welcome to Techspot :wave:

    where are the batch files stored? Why do you want to do it?

    Are you aware that this is a rather insecure thing to be doing?
     
  3. heru79

    heru79 TS Rookie Topic Starter

    I work at a computer helpdesk for a local school disctrict THis is what i was given-"My part was to find a way that a user can clck on a link and a batch
    file will be automatically downloaded and ran (the "File Download"
    window should not pop up). I did not find a solution but .SHTML and SSI,
    javascript look promising." That is the information that i have at the moment. i will try to get some more information but that is what i have to work with at the moment. I am assuming these files are safe and inside our network.
     
  4. Spike

    Spike TS Evangelist Posts: 2,168

    Schools are teaching some pretty wierd practices at the moment. Those batch files could potentially be changed to contain anything, and then some user innocently goes and starts a script that says "format c:" just by clicking a link. crazy. Just because a file is inside you're own network, it doesn't nessecarily mean it's safe - and safe is a relative term in the first place when you have a large number of people using the same network.

    They must have some kind of reason for it, surely? lol

    You could probably do it by using vbscript, but you're still going to get some hefty warnings about running scripts like that unless you completely do away with basic security features on the client machines.
     
  5. kraugie

    kraugie TS Rookie Posts: 19

    Sound like something a spyware writer might want to know. Hmmm
     
  6. Spike

    Spike TS Evangelist Posts: 2,168

    I doubt that. Any person writing spyware that actually works is unlikely to be using batch scripting to do it, and wouldn't need to ask how to do it anyway.

    It's not a reliable method of script execution. It would essentially be almost a "local code execution" vulnerability - a vulnerability that in the right hands could/would render full administrative access to a machine. (hence the reason for the security advice to turn off scripting in your browser unless you specifically need it)

    you'd have to build a complete system of checks and balances to do it safely, which would be no easy task.
     
  7. paranoid guy

    paranoid guy TS Rookie Posts: 420

    Why in the world would anyone want to do this? Do you mean that you don't want the ms-dos window to pop up? That's what usually pops up when I use batch files...
    heh, just turn off their monitors :haha:
     
  8. Spike

    Spike TS Evangelist Posts: 2,168

    I was under the impression that he wanted to run a batch script automatically from a link on a web page, without actually having the download dialogue pop up to get the batch file, and without warning before it runs.
     
  9. paranoid guy

    paranoid guy TS Rookie Posts: 420

    Oh, I thought he was trying to give it to someone on the network :blush:
    Still dodgy as hell itself, though :suspiciou
     
  10. Spike

    Spike TS Evangelist Posts: 2,168

    Personally, I think it's a bad idea whichever way you look at it. lol
     
  11. paranoid guy

    paranoid guy TS Rookie Posts: 420

    If he just puts it somewhere that's accessible from any computer on the network there's no need for that dodgy stuff. What was that other question a while ago about not being allowed to use my computer, or something from my computer? I thought my school admin was bad...
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...