Topic "TMP-files contains login information as plain text"

Author Message
geraldb
[View user's profile]

Joined: 2012-12-11
Posts: 3
Location: near Mainz
Hi,

I've tested including winscp.dll combined with portable winscp.exe in my VB-project. When testing I found some created tmp-files in user's temp directory and these files won't deleted when session crash. These files contains complete parameters as plain text, including user, password, port, server name and other and can be read easily.

Is encrpytion of generated tmp-files intended?

Or is there any way to pre-define name of generated tmp-files when using the winscp.dll? In this case I can define name by myself and overwrite/remove existing tmp-file after executing file transfer. Otherwise this dll is not useful and I have to implement own process starting winscp.exe using all necessary parameters in command string.

Gerald
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24530
Location: Prague, Czechia
Thanks for your report.

This issue has been added to the tracker:
http://winscp.net/tracker/show_bug.cgi?id=957
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24530
Location: Prague, Czechia
I have sent you an email with a development version of WinSCP to address you have used to register on this forum.
Advertisements

You can post new topics in this forum






Search Site

What is WinSCP?

It is award-winning SFTP client, SCP client, FTPS client and FTP client integrated into one software program for file transfer to FTP server or secure SFTP server. [More]

And it's free!

Donate

About donations

$9   $19   $49   $99

About donations

Recommend

WinSCP Privacy Policy

WinSCP License