TeamPass icon indicating copy to clipboard operation
TeamPass copied to clipboard

Hacking attemps when export to csv

Open ArnOCP opened this issue 3 years ago • 1 comments

Steps to reproduce

1.connect to teampass with the user account 2.click to export to csv 3. redirect to hacking attemp page

Expected behaviour

I want to export passwords to csv

Actual behaviour

When i try to export passwords to csv, i immediatly have an hacking attempt page loaded

Server configuration

Operating system: Windows server 2016

Web server: IIS

Database: MySQL Community 8.0.27.0

PHP version: php 7.4.25

Teampass version: TeamPass 2.1.27.36

Teampass configuration file:

Updated from an older Teampass or fresh install: fresh install PLEASE attach to this issue the file /includes/config/tp.config.php.

tp.config.php.txt

Client configuration

Browser: FF 91.4.1 esr, Chrome 97.0.4692.71

Operating system: Windows 10 20H2

Logs

Web server error log

Insert your webserver log here

[u_ex220107_x.log](https://github.com/nilsteampassnet/TeamPass/files/7829381/u_ex220107_x.log)

Log from the web-browser developer console (CTRL + SHIFT + i)

Insert the log here and especially the answer of the query that failed.

ArnOCP avatar Jan 07 '22 14:01 ArnOCP

Hello, I have also this issue. I might start to dig into code to find what's happens. I would start here https://github.com/nilsteampassnet/TeamPass/blob/master/pages/export.php#L33 but before, I'd like to ask you for any advices, ideas, or maybe local code or fix, not already pushed :sweat_smile: ?

nathanael-h avatar Jul 04 '22 15:07 nathanael-h