script to upload FTP w/o full access

discrfp3

New Member
Messages
1
Reaction score
0
Points
0
I've created a python script to automatically upload files to my site, which has my full information to log into ftp://ftp.mysite.x10.mx.
However, I want to release this script to the public... I need to find a way that FTPs to a directory only without an FTP client, such that the script's source will only have information for a limited account.

Is this possible?
 

essellar

Community Advocate
Community Support
Messages
3,295
Reaction score
227
Points
63
Three problems:

1) You only have one FTP account, and it has whatever permissions it has. You can limit what a script does, but if it's in an interpreted language like Python, you need to release the source code to the user and they can easily modify things at their end, allowing them to completely take over your site, add malware, etc. Remember, you only have one account, and they'll be logged in as you, so directory-level permissions can't be applied.

2) Users would only be able to run the script if they have the appropriate Python libraries installed locally.

3) Public uploads are in violation of the terms of service, so if you do manage to get it going your account will be suspended. Exceptions are normally made for innocuous things like small avatar images/signatures for forums and so on, but conspicuous growth on the filesystem will be checked out. And if anyone uploads anything at all that is in violation of the TOS or the acceptable use policy and does that with your credentials you have no plausible deniability. (In the extreme, and let's step outside of the confines of the user/host relationship, you could become criminally liable for what is uploaded. All it takes is one child porn image, and you could be toast.)
 
Top