启用 Web 的 .EXE
网站是否可以在访问时自动运行外部.exe 文件?也就是说,客户端文件系统上尚不存在 .exe 文件。如果是这样,这怎么可能?另外,我还阅读了有关在此过程中使用 HTA 文件或 ActiveX 组件或 Java 的信息。 java小程序是否可以在访问网站时将代码写入客户端的文件系统?我知道这是一个严重的安全问题,请进一步指导我。谢谢。
Is it possible for a website to automatically run an external .exe file upon visiting? That is, an .exe file that is not already on the client file system. If so how is this possible? Also, i've read about the use of HTA files or ActiveX components or Java in this process. Is it possible for a java applet to write code to a client's file system upon visiting a website? I understand this is a serious security concern, please enlighten me further. Thank you.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
有可能,应用程序(exe 或小程序)必须经过用户签名并授予权限才能运行。即使用户的安全策略仍然可能拒绝它,但有可能..
java 可信小程序信息:
http://www-personal.umich.edu/~lsiden/tutorials/signed-applet/signed-applet.html
签名的 Activex 控件:
http://dedjo.blogspot.com/2007/07/creating-exusing-and -signing-activex.html
it's possible, the app (exe or applet) must be signed and granted permission by the user in order to run. even still the user's security policy may deny it, but it's possible..
java trusted applet info:
http://www-personal.umich.edu/~lsiden/tutorials/signed-applet/signed-applet.html
signed activex control:
http://dedjo.blogspot.com/2007/07/creating-exposing-and-signing-activex.html
听起来你确实需要一个浏览器插件;
查看 FireBreath:http://firebreath.googlecode.com
它将允许您创建一个 C++ 插件,该插件将几乎可以在任何 Windows 浏览器上运行,您可以用它做任何您需要的事情。
请注意,用户必须首先安装插件/ActiveX 控件,并且您需要非常小心地考虑安全性(即确保没有人可以在远程计算机上运行任意代码)
It really sounds like what you need is a browser plugin;
check out FireBreath: http://firebreath.googlecode.com
it will allow you to create a c++ plugin that will run on almost any windows browser, and you can do whatever you need with it.
Note that the user will have to install the plugin/ActiveX control first, and that you need to be very careful with security considerations (i.e. make sure nobody can run arbitrary code on the remote computer)