We have been using a code-signed JumpLoader with PHP upload handler for several years without any issues. For those users with Java 7 update 21 and above, JumpLoader is now throwing Security Exception, Missing required Permissions manifest attribute in main jar: due to additional security mechanism built into Java.
Adding "Permissions: all-permissions" and re-signing jar file will not solve the problem as the files themselves have to be signed before creating the jar file. By contacting JumpLoader, we were able to obtain the newest jumploader_z.jar file. However, running the Applet would cause "Bad Server Response" error and wouldn't display the files that are just uploaded. By troubleshooting each line of PHP Upload Handler, the problem turned out to be the register_global being turned on.
By turning off register_global in .htaccess, the problem was resolved. You may also turn off register_global by editing php.ini file.
php_flag register_globals off
Turning register_global at the sub-folder level didn't fix the problem in our environment, so your website has to work without register_global turned on. Please do not blindly turn off register_global off, as it may break your website.
Comments
Add new comment