nilsteampassnet / TeamPass

Collaborative Passwords Manager
https://www.teampass.net
1.68k stars 550 forks source link

Hacking attemps when export to csv #2997

Open ArnOCP opened 2 years ago

ArnOCP commented 2 years ago
### Steps to reproduce 1.connect to teampass with the user account 2.click to export to csv 3. redirect to hacking attemp page ### Expected behaviour I want to export passwords to csv ### Actual behaviour When i try to export passwords to csv, i immediatly have an hacking attempt page loaded ### Server configuration **Operating system**: Windows server 2016 **Web server:** IIS **Database:** MySQL Community 8.0.27.0 **PHP version:** php 7.4.25 **Teampass version:** TeamPass 2.1.27.36 **Teampass configuration file:** **Updated from an older Teampass or fresh install:** fresh install PLEASE attach to this issue the file `/includes/config/tp.config.php`. [tp.config.php.txt](https://github.com/nilsteampassnet/TeamPass/files/7829370/tp.config.php.txt) ### Client configuration **Browser:** FF 91.4.1 esr, Chrome 97.0.4692.71 **Operating system:** Windows 10 20H2 ### Logs #### Web server error log ``` Insert your webserver log here [u_ex220107_x.log](https://github.com/nilsteampassnet/TeamPass/files/7829381/u_ex220107_x.log) ``` #### Log from the web-browser developer console (CTRL + SHIFT + i) ``` Insert the log here and especially the answer of the query that failed. ```
nathanael-h commented 2 years ago

Hello, I have also this issue. I might start to dig into code to find what's happens. I would start here https://github.com/nilsteampassnet/TeamPass/blob/master/pages/export.php#L33 but before, I'd like to ask you for any advices, ideas, or maybe local code or fix, not already pushed :sweat_smile: ?