also @ TechSpot: Microsoft's Indian online store hacked, passwords and user data exposed
Welcome to the TechSpot OpenBoards. Please read the FAQ if you have any questions. Sign up or Login to participate.

Go Back   TechSpot OpenBoards > Software > Software Apps

Collaborate in the cloud with Office, Exchange, SharePoint, and Lync

batch file

Thread Tools Search this Thread
  #1  
Old 04-06-2006
Newcomer, in training
 
Member since: Apr 2006, 2 posts
batch file

i am looking for a program so a user can clck on a link and a batch
file will be automatically downloaded and ran (the "File Download"
window should not pop up). i have looked around and i can not find one. Just wondering if anyone knew of a program like this
  #2  
Old 04-06-2006
TechSpot Evangelist
 
Location: Bridgend
Member since: Nov 2003, 2,371 posts
Welcome to Techspot

where are the batch files stored? Why do you want to do it?

Are you aware that this is a rather insecure thing to be doing?
  #3  
Old 04-06-2006
Newcomer, in training
 
Member since: Apr 2006, 2 posts
I work at a computer helpdesk for a local school disctrict THis is what i was given-"My part was to find a way that a user can clck on a link and a batch
file will be automatically downloaded and ran (the "File Download"
window should not pop up). I did not find a solution but .SHTML and SSI,
javascript look promising." That is the information that i have at the moment. i will try to get some more information but that is what i have to work with at the moment. I am assuming these files are safe and inside our network.

Last edited by heru79; 04-06-2006 at 06:57 PM..
  #4  
Old 04-06-2006
TechSpot Evangelist
 
Location: Bridgend
Member since: Nov 2003, 2,371 posts
Schools are teaching some pretty wierd practices at the moment. Those batch files could potentially be changed to contain anything, and then some user innocently goes and starts a script that says "format c:" just by clicking a link. crazy. Just because a file is inside you're own network, it doesn't nessecarily mean it's safe - and safe is a relative term in the first place when you have a large number of people using the same network.

They must have some kind of reason for it, surely? lol

You could probably do it by using vbscript, but you're still going to get some hefty warnings about running scripts like that unless you completely do away with basic security features on the client machines.

Last edited by Spike; 04-06-2006 at 07:16 PM..
  #5  
Old 04-06-2006
kraugie's Avatar
Newcomer, in training
 
Location: Nebraska, USA
Member since: Jun 2005, 28 posts
Sound like something a spyware writer might want to know. Hmmm
  #6  
Old 04-06-2006
TechSpot Evangelist
 
Location: Bridgend
Member since: Nov 2003, 2,371 posts
I doubt that. Any person writing spyware that actually works is unlikely to be using batch scripting to do it, and wouldn't need to ask how to do it anyway.

It's not a reliable method of script execution. It would essentially be almost a "local code execution" vulnerability - a vulnerability that in the right hands could/would render full administrative access to a machine. (hence the reason for the security advice to turn off scripting in your browser unless you specifically need it)

you'd have to build a complete system of checks and balances to do it safely, which would be no easy task.

Last edited by Spike; 04-06-2006 at 07:24 PM..
  #7  
Old 04-06-2006
paranoid guy's Avatar
TechSpot Booster
 
Location: Ireland
Member since: Feb 2006, 459 posts
Why in the world would anyone want to do this? Do you mean that you don't want the ms-dos window to pop up? That's what usually pops up when I use batch files...
heh, just turn off their monitors
  #8  
Old 04-06-2006
TechSpot Evangelist
 
Location: Bridgend
Member since: Nov 2003, 2,371 posts
I was under the impression that he wanted to run a batch script automatically from a link on a web page, without actually having the download dialogue pop up to get the batch file, and without warning before it runs.
  #9  
Old 04-06-2006
paranoid guy's Avatar
TechSpot Booster
 
Location: Ireland
Member since: Feb 2006, 459 posts
Oh, I thought he was trying to give it to someone on the network
Still dodgy as hell itself, though
  #10  
Old 04-06-2006
TechSpot Evangelist
 
Location: Bridgend
Member since: Nov 2003, 2,371 posts
Personally, I think it's a bad idea whichever way you look at it. lol
  #11  
Old 04-06-2006
paranoid guy's Avatar
TechSpot Booster
 
Location: Ireland
Member since: Feb 2006, 459 posts
If he just puts it somewhere that's accessible from any computer on the network there's no need for that dodgy stuff. What was that other question a while ago about not being allowed to use my computer, or something from my computer? I thought my school admin was bad...
Closed Thread

Similar Topics
Topic Replies Forum
Batch file 0 Windows OS
Batch file 10 Software Apps
Batch File Help 8 Windows OS
batch file help 0 Windows OS
help me create a batch file in XP 2 General Discussion

Thread Tools Search this Thread
Search this Thread:

Advanced Search
All times are GMT -4. The time now is 06:09 AM.