[ZendTo] Chunk name missing or too long

[Jules]

Damien,

Does the log show if any of the errors have anything in common, at all?
Same user, same IP, same anything?
Are you still getting these errors?
If so, how often (compared with some indication of the traffic your 
ZendTo site usually gets)?

The "chunk name" is a random string created by the user's web browser. 
But I do sanity-check it thoroughly on the server.
So it may be nothing more than some "penetration tester" (to be polite) 
trying to use all sorts of other strings and disallowed characters in 
the "chunk name" in order to see if they can break it.

Because the chunked uploading is relatively new in ZendTo, there are 
probably all sorts of lovely people out there trying to see if they can 
do JavaScript injection, SQL injection, all sorts of unpleasant things 
by subverting the new feature.

If none of your users are complaining, and you only see these 
occasionally, then I wouldn't worry too much about this.

Cheers,
Jules.


On 09/07/2020 14:14, Solodow, Damien via ZendTo wrote:
>
> Running 6.03-3 on Ubuntu 18.04 LTS
>
> Seeing a few lines of “Error: Chunk name missing or too long” in the 
> system log. Chunk size is set to the default 50mb, but I didn’t see 
> anything in preferences.php about chunk name.
>
> ​
>
> Gaylor Electric logo <https://gaylor.com/>
>
> Gaylor Electric Website <https://gaylor.com/>
>
> 	
>
> Facebook <https://www.facebook.com/gaylorelectric>
>
> 	
>
> Twitter <https://www.twitter.com/gaylorelectric>
>
> 	
>
> LinkedIn <https://www.linkedin.com/company/gaylor-inc-/>
>
> 	
>
> *Damien Solodow*
>
> *IS System Administrator*
>
> Gaylor Electric, Inc.
>
> 5750 Castle Creek Pkwy N Drive, Suite 400
>
> Indianapolis
>
> 	
>
> ,
>
> 	
>
> IN
>
> 	
>
> .
>
> 	
>
> 46250
>
> O: 317.815.3103 <tel:317.815.3103>
>
> 	
>
> |
>
> 	
>
> M: 317.506.8521 <tel:317.506.8521>
>
> *317.759.0077 <https://help.gaylor.com/>emergency 
> <https://help.gaylor.com/>IS support <https://help.gaylor.com/>*
>
>
> _______________________________________________
> ZendTo mailing list
> ZendTo at zend.to
> http://jul.es/mailman/listinfo/zendto

Jules

-- 
Julian Field MEng CEng CITP MBCS MIEEE MACM

'The best and most beautiful things in life cannot be seen or even
  touched; they must be felt with the heart.' - Helen Keller

www.Zend.To
Twitter: @JulesFM

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://jul.es/pipermail/zendto/attachments/20200709/9b5151dc/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 5535 bytes
Desc: not available
URL: <http://jul.es/pipermail/zendto/attachments/20200709/9b5151dc/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 1014 bytes
Desc: not available
URL: <http://jul.es/pipermail/zendto/attachments/20200709/9b5151dc/attachment-0001.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 713 bytes
Desc: not available
URL: <http://jul.es/pipermail/zendto/attachments/20200709/9b5151dc/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 852 bytes
Desc: not available
URL: <http://jul.es/pipermail/zendto/attachments/20200709/9b5151dc/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.png
Type: image/png
Size: 774 bytes
Desc: not available
URL: <http://jul.es/pipermail/zendto/attachments/20200709/9b5151dc/attachment-0007.png>