{"id":456,"date":"2012-02-10T16:12:58","date_gmt":"2012-02-10T15:12:58","guid":{"rendered":"https:\/\/blog.maxer.hu\/?p=456"},"modified":"2022-04-11T12:04:31","modified_gmt":"2022-04-11T11:04:31","slug":"figyelem-tinymce-es-flv-player-biztonsagi-res","status":"publish","type":"post","link":"https:\/\/maxer.hu\/blog\/figyelem-tinymce-es-flv-player-biztonsagi-res\/","title":{"rendered":"Figyelem! TinyMCE \u00e9s FLV Player biztons\u00e1gi r\u00e9s!"},"content":{"rendered":"<p>M\u00e1r tal\u00e1n t\u00f6bben is \u00e9szrevett\u00e9k, hogy az ut\u00f3bbi id\u0151ben megszaporodtak a felt\u00f6rt weboldalak.<\/p>\n<p>Nyomoz\u00e1sunk sor\u00e1n az al\u00e1bbi t\u00e9nyeket t\u00e1rtuk fel:<\/p>\n<p>Az \u00e9rintett weboldalak t\u00f6bbnyire WordPress, Joomla, Drupal \u00e9s m\u00e1s keretrendszerekre \u00e9p\u00fcl\u0151 weboldalak.<br \/>\nVannak olyan t\u00f6rt weboldalak is, amelyek ak\u00e1r egyedi fejleszt\u00e9s\u0171ek is lehetnek, m\u00e9gis felt\u00f6rik, mert az al\u00e1bbiakban le\u00edrt TinyMCE\/FLV PLAYER komponenst tartalmazz\u00e1k.<\/p>\n<p><strong>A T\u00d6R\u00c9SEK OKA:<\/strong><br \/>\nBizonyos b\u0151v\u00edtm\u00e9nyek, melyek az FLV PLAYER komponenst is haszn\u00e1lj\u00e1k, mind s\u00e9r\u00fcl\u00e9kenny\u00e9 v\u00e1lnak \u00e9s ez\u00e1ltal fel\u00fcletet adnak rosszindulat\u00fa t\u00e1mad\u00e1soknak.<strong><\/strong><br \/>\nMinden jel arra mutat, hogy nem kifejezetten a TinyMCE-ben van a biztons\u00e1gi r\u00e9s, az csak k\u00f6zbens\u0151 szerepl\u0151 \u00e9s potenci\u00e1lis vesz\u00e9lyforr\u00e1s, hanem az FLV PLAYER nev\u0171 kieg\u00e9sz\u00edt\u0151\/komponens okozza a t\u00e9nyleges probl\u00e9m\u00e1t.<\/p>\n<p><strong>MEGOLD\u00c1S:<\/strong><br \/>\nJavasoljuk, hogy mindenki, aki FLV PLAYER komponenst haszn\u00e1l a weboldal\u00e1n, az halad\u00e9ktalanul t\u00f6r\u00f6lje le fizikailag is. Nem el\u00e9g kikapcsolni (deaktiv\u00e1lni),<span style=\"color: #ff0000;\"><strong> fizikailag le kell t\u00f6r\u00f6lni a t\u00e1rhelyr\u0151l!<\/strong><\/span><br \/>\nMivel ez egy nagyon bonyolult s\u00e9r\u00fcl\u00e9kenys\u00e9g, amihez a TinyMCE is assziszt\u00e1l, ha biztosra akarunk menni, a TinyMCE-t is t\u00f6r\u00f6lj\u00fck le. Ezt sem el\u00e9g kikapcsolni az admin fel\u00fcleteken, fizikailag ki kell t\u00f6r\u00f6lni a TinyMCE mapp\u00e1it a t\u00e1rhelyr\u0151l.<\/p>\n<p><strong>WORDPRESS, JOOMLA, DRUPAL STB.. friss\u00edt\u00e9s megoldja-e ezt a probl\u00e9m\u00e1t?<\/strong><br \/>\nA tapasztaltuk szerint fontos, hogy legfrissebb verzi\u00f3 m\u0171k\u00f6dj\u00f6n a keretrendszerekb\u0151l, de ezt a probl\u00e9m\u00e1t a friss\u00edt\u00e9s <strong>NEM oldja meg.<\/strong><\/p>\n<p><strong>TinyMCE HELYETT:<\/strong><br \/>\nA szakmai f\u00f3rumokon a TinyMCE helyett a ckeditort (r\u00e9gebbi nev\u00e9n fckeditort) aj\u00e1nlj\u00e1k, mi is ezt aj\u00e1nljuk, rem\u00e9lhet\u0151leg az nem nyit r\u00e9st a hozz\u00e1 kapcsol\u00f3d\u00f3 kieg\u00e9sz\u00edt\u0151knek.<\/p>\n<p>WordPress eset\u00e9n TinyMCE helyett a ckeditor plugint javasoljuk:<br \/>\n<a href=\"http:\/\/wordpress.org\/extend\/plugins\/ckeditor-for-wordpress\/\">http:\/\/wordpress.org\/extend\/plugins\/ckeditor-for-wordpress\/<\/a><\/p>\n<p>Joomla eset\u00e9n itt tal\u00e1lhat\u00f3 a ckeditor:<br \/>\n<a href=\"http:\/\/extensions.joomla.org\/extensions\/edition\/editors\/90\">http:\/\/extensions.joomla.org\/extensions\/edition\/editors\/90<\/a><\/p>\n<p>Drupal eset\u00e9n itt:<br \/>\n<a href=\"http:\/\/drupal.org\/project\/ckeditor\">http:\/\/drupal.org\/project\/ckeditor<\/a><\/p>\n<p><strong>A biztons\u00e1gi r\u00e9sr\u0151l r\u00e9szletesebb inform\u00e1ci\u00f3 (angol nyelv\u0171):<\/strong><br \/>\n<a href=\"http:\/\/packetstormsecurity.org\/files\/107325\/tinymceflvplayer-xssdisclose.txt\">http:\/\/packetstormsecurity.org\/files\/107325\/tinymceflvplayer-xssdisclose.txt<\/a><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>M\u00e1r tal\u00e1n t\u00f6bben is \u00e9szrevett\u00e9k, hogy az ut\u00f3bbi id\u0151ben megszaporodtak a felt\u00f6rt weboldalak. Nyomoz\u00e1sunk sor\u00e1n az al\u00e1bbi t\u00e9nyeket t\u00e1rtuk fel: Az \u00e9rintett weboldalak t\u00f6bbnyire WordPress, Joomla, Drupal \u00e9s m\u00e1s keretrendszerekre \u00e9p\u00fcl\u0151 weboldalak. Vannak olyan t\u00f6rt weboldalak is, amelyek ak\u00e1r egyedi&hellip; <br \/><a class=\"read-more-button\" href=\"https:\/\/maxer.hu\/blog\/figyelem-tinymce-es-flv-player-biztonsagi-res\/\">B\u0151vebben<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.8 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Figyelem! TinyMCE \u00e9s FLV Player biztons\u00e1gi r\u00e9s! - MAXER BLOG<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/maxer.hu\/blog\/figyelem-tinymce-es-flv-player-biztonsagi-res\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Figyelem! TinyMCE \u00e9s FLV Player biztons\u00e1gi r\u00e9s! - MAXER BLOG\" \/>\n<meta property=\"og:description\" content=\"M\u00e1r tal\u00e1n t\u00f6bben is \u00e9szrevett\u00e9k, hogy az ut\u00f3bbi id\u0151ben megszaporodtak a felt\u00f6rt weboldalak. Nyomoz\u00e1sunk sor\u00e1n az al\u00e1bbi t\u00e9nyeket t\u00e1rtuk fel: Az \u00e9rintett weboldalak t\u00f6bbnyire WordPress, Joomla, Drupal \u00e9s m\u00e1s keretrendszerekre \u00e9p\u00fcl\u0151 weboldalak. Vannak olyan t\u00f6rt weboldalak is, amelyek ak\u00e1r egyedi&hellip; B\u0151vebben\" \/>\n<meta property=\"og:url\" content=\"https:\/\/maxer.hu\/blog\/figyelem-tinymce-es-flv-player-biztonsagi-res\/\" \/>\n<meta property=\"og:site_name\" content=\"MAXER BLOG\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/tarhelyakcio\/\" \/>\n<meta property=\"article:published_time\" content=\"2012-02-10T15:12:58+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-04-11T11:04:31+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@maxerhosting\" \/>\n<meta name=\"twitter:site\" content=\"@maxerhosting\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/maxer.hu\/blog\/figyelem-tinymce-es-flv-player-biztonsagi-res\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/maxer.hu\/blog\/figyelem-tinymce-es-flv-player-biztonsagi-res\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\/\/maxer.hu\/blog\/#\/schema\/person\/7acfd74f6223d8c24ab7e65f97af855e\"},\"headline\":\"Figyelem! TinyMCE \u00e9s FLV Player biztons\u00e1gi r\u00e9s!\",\"datePublished\":\"2012-02-10T15:12:58+00:00\",\"dateModified\":\"2022-04-11T11:04:31+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/maxer.hu\/blog\/figyelem-tinymce-es-flv-player-biztonsagi-res\/\"},\"wordCount\":393,\"publisher\":{\"@id\":\"https:\/\/maxer.hu\/blog\/#organization\"},\"articleSection\":[\"Biztons\u00e1g\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/maxer.hu\/blog\/figyelem-tinymce-es-flv-player-biztonsagi-res\/\",\"url\":\"https:\/\/maxer.hu\/blog\/figyelem-tinymce-es-flv-player-biztonsagi-res\/\",\"name\":\"Figyelem! TinyMCE \u00e9s FLV Player biztons\u00e1gi r\u00e9s! - MAXER BLOG\",\"isPartOf\":{\"@id\":\"https:\/\/maxer.hu\/blog\/#website\"},\"datePublished\":\"2012-02-10T15:12:58+00:00\",\"dateModified\":\"2022-04-11T11:04:31+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/maxer.hu\/blog\/figyelem-tinymce-es-flv-player-biztonsagi-res\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/maxer.hu\/blog\/figyelem-tinymce-es-flv-player-biztonsagi-res\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/maxer.hu\/blog\/figyelem-tinymce-es-flv-player-biztonsagi-res\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Biztons\u00e1g\",\"item\":\"https:\/\/maxer.hu\/blog\/category\/biztonsag\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Figyelem! TinyMCE \u00e9s FLV Player biztons\u00e1gi r\u00e9s!\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/maxer.hu\/blog\/#website\",\"url\":\"https:\/\/maxer.hu\/blog\/\",\"name\":\"MAXER BLOG\",\"description\":\"domain regisztr\u00e1ci\u00f3, t\u00e1rhely, webt\u00e1rhely\",\"publisher\":{\"@id\":\"https:\/\/maxer.hu\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/maxer.hu\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/maxer.hu\/blog\/#organization\",\"name\":\"Maxer Hosting\",\"url\":\"https:\/\/maxer.hu\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/maxer.hu\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/blog.maxer.hu\/wp-content\/uploads\/2015\/04\/maxer-logo-simple.png\",\"contentUrl\":\"https:\/\/blog.maxer.hu\/wp-content\/uploads\/2015\/04\/maxer-logo-simple.png\",\"width\":272,\"height\":310,\"caption\":\"Maxer Hosting\"},\"image\":{\"@id\":\"https:\/\/maxer.hu\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/tarhelyakcio\/\",\"https:\/\/x.com\/maxerhosting\",\"http:\/\/www.linkedin.com\/in\/maxerhosting\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/maxer.hu\/blog\/#\/schema\/person\/7acfd74f6223d8c24ab7e65f97af855e\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/maxer.hu\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/7b5e5a09292bb29a0762f4542fb292b9?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/7b5e5a09292bb29a0762f4542fb292b9?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"url\":\"https:\/\/maxer.hu\/blog\/author\/admin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Figyelem! TinyMCE \u00e9s FLV Player biztons\u00e1gi r\u00e9s! - MAXER BLOG","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/maxer.hu\/blog\/figyelem-tinymce-es-flv-player-biztonsagi-res\/","og_locale":"en_US","og_type":"article","og_title":"Figyelem! TinyMCE \u00e9s FLV Player biztons\u00e1gi r\u00e9s! - MAXER BLOG","og_description":"M\u00e1r tal\u00e1n t\u00f6bben is \u00e9szrevett\u00e9k, hogy az ut\u00f3bbi id\u0151ben megszaporodtak a felt\u00f6rt weboldalak. Nyomoz\u00e1sunk sor\u00e1n az al\u00e1bbi t\u00e9nyeket t\u00e1rtuk fel: Az \u00e9rintett weboldalak t\u00f6bbnyire WordPress, Joomla, Drupal \u00e9s m\u00e1s keretrendszerekre \u00e9p\u00fcl\u0151 weboldalak. Vannak olyan t\u00f6rt weboldalak is, amelyek ak\u00e1r egyedi&hellip; B\u0151vebben","og_url":"https:\/\/maxer.hu\/blog\/figyelem-tinymce-es-flv-player-biztonsagi-res\/","og_site_name":"MAXER BLOG","article_publisher":"https:\/\/www.facebook.com\/tarhelyakcio\/","article_published_time":"2012-02-10T15:12:58+00:00","article_modified_time":"2022-04-11T11:04:31+00:00","author":"admin","twitter_card":"summary_large_image","twitter_creator":"@maxerhosting","twitter_site":"@maxerhosting","twitter_misc":{"Written by":"admin","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/maxer.hu\/blog\/figyelem-tinymce-es-flv-player-biztonsagi-res\/#article","isPartOf":{"@id":"https:\/\/maxer.hu\/blog\/figyelem-tinymce-es-flv-player-biztonsagi-res\/"},"author":{"name":"admin","@id":"https:\/\/maxer.hu\/blog\/#\/schema\/person\/7acfd74f6223d8c24ab7e65f97af855e"},"headline":"Figyelem! TinyMCE \u00e9s FLV Player biztons\u00e1gi r\u00e9s!","datePublished":"2012-02-10T15:12:58+00:00","dateModified":"2022-04-11T11:04:31+00:00","mainEntityOfPage":{"@id":"https:\/\/maxer.hu\/blog\/figyelem-tinymce-es-flv-player-biztonsagi-res\/"},"wordCount":393,"publisher":{"@id":"https:\/\/maxer.hu\/blog\/#organization"},"articleSection":["Biztons\u00e1g"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/maxer.hu\/blog\/figyelem-tinymce-es-flv-player-biztonsagi-res\/","url":"https:\/\/maxer.hu\/blog\/figyelem-tinymce-es-flv-player-biztonsagi-res\/","name":"Figyelem! TinyMCE \u00e9s FLV Player biztons\u00e1gi r\u00e9s! - MAXER BLOG","isPartOf":{"@id":"https:\/\/maxer.hu\/blog\/#website"},"datePublished":"2012-02-10T15:12:58+00:00","dateModified":"2022-04-11T11:04:31+00:00","breadcrumb":{"@id":"https:\/\/maxer.hu\/blog\/figyelem-tinymce-es-flv-player-biztonsagi-res\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/maxer.hu\/blog\/figyelem-tinymce-es-flv-player-biztonsagi-res\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/maxer.hu\/blog\/figyelem-tinymce-es-flv-player-biztonsagi-res\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Biztons\u00e1g","item":"https:\/\/maxer.hu\/blog\/category\/biztonsag\/"},{"@type":"ListItem","position":2,"name":"Figyelem! TinyMCE \u00e9s FLV Player biztons\u00e1gi r\u00e9s!"}]},{"@type":"WebSite","@id":"https:\/\/maxer.hu\/blog\/#website","url":"https:\/\/maxer.hu\/blog\/","name":"MAXER BLOG","description":"domain regisztr\u00e1ci\u00f3, t\u00e1rhely, webt\u00e1rhely","publisher":{"@id":"https:\/\/maxer.hu\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/maxer.hu\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/maxer.hu\/blog\/#organization","name":"Maxer Hosting","url":"https:\/\/maxer.hu\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/maxer.hu\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/blog.maxer.hu\/wp-content\/uploads\/2015\/04\/maxer-logo-simple.png","contentUrl":"https:\/\/blog.maxer.hu\/wp-content\/uploads\/2015\/04\/maxer-logo-simple.png","width":272,"height":310,"caption":"Maxer Hosting"},"image":{"@id":"https:\/\/maxer.hu\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/tarhelyakcio\/","https:\/\/x.com\/maxerhosting","http:\/\/www.linkedin.com\/in\/maxerhosting"]},{"@type":"Person","@id":"https:\/\/maxer.hu\/blog\/#\/schema\/person\/7acfd74f6223d8c24ab7e65f97af855e","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/maxer.hu\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/7b5e5a09292bb29a0762f4542fb292b9?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/7b5e5a09292bb29a0762f4542fb292b9?s=96&d=mm&r=g","caption":"admin"},"url":"https:\/\/maxer.hu\/blog\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/maxer.hu\/blog\/wp-json\/wp\/v2\/posts\/456"}],"collection":[{"href":"https:\/\/maxer.hu\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/maxer.hu\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/maxer.hu\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/maxer.hu\/blog\/wp-json\/wp\/v2\/comments?post=456"}],"version-history":[{"count":12,"href":"https:\/\/maxer.hu\/blog\/wp-json\/wp\/v2\/posts\/456\/revisions"}],"predecessor-version":[{"id":468,"href":"https:\/\/maxer.hu\/blog\/wp-json\/wp\/v2\/posts\/456\/revisions\/468"}],"wp:attachment":[{"href":"https:\/\/maxer.hu\/blog\/wp-json\/wp\/v2\/media?parent=456"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/maxer.hu\/blog\/wp-json\/wp\/v2\/categories?post=456"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/maxer.hu\/blog\/wp-json\/wp\/v2\/tags?post=456"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}