PATCH25G.DOC

4 KB 023d85506e8897e3…







                       ******************************
                       ** T.A.G. 2.5g System Patch **
                       ******************************

The  following patch fixes two  security problems for  T.A.G. Version 2.5g.
The first patch in this file  should only be used with version 2.5g,  while
the second will operate on any version of T.A.G. after  the protocol editor
was added.


             --------------------------------------------------
                                  Patch #1
             Elimination of the Local Directory Archive Testing
             --------------------------------------------------

          WARNING:  Should only be used with Version 2.5g

          NOTE:     Global archive testing will still function normally.

To run  this patch, place the  included patch25g.exe file in  the directory
with your TAG.OVR  file.  Then simply  type "patch25g" and the  corrections
will be  written to the TAG.OVR file.   This patch can be executed multiple
times with no ill effects.

Once run, LOCAL directory archive testing (ZIPFT.BAT, ARCFT.BAT, LZHFT.BAT,
and PAKFT.BAT)  will no longer be  available.  Please note  that the global
archive testing files  (located in  the Main BBS  Directory (C:\BBS))  will
still function normally.  This patch only effects special testing  on a per
section basis.  We hope to introduce a more secure method of doing  this in
the future.


             -------------------------------------------------
                                  Patch #2
             Adding the "restrict" Option to DSZ Batch Uploads
             -------------------------------------------------

     NOTE:     These changes  should only be made to DSZ Batch ** UPLOAD **
               Protocols.

To add the "restrict" option to the DSZ batch upload protocols, perform the
following steps:

1.   Place the file "cdd.exe" in either your Main BBS Directory (C:\BBS) or
     a directory accessible from the DOS PATH.

2.   Place the file "dszbatul.bat" in your Main BBS Directory (C:\BBS) with
     your "protocol.bat" file.







3.   Modify  all batch upload protocols to call the new "dszbatul.bat" file
     with the following parameter format:

          dszbatul [UL Directory] [Current Dir]\dsz <****>

          <****> =  Remaining  parameters for  the corresponding  DSZ batch
                    upload protocol, not including the final [UL Directory]
                    parameter.

     Included here are uploads strings necessary for YModem, YModem-G,  and
     ZModem  batch uploads.  Please note  that the items identified in []'s
     are NOT typed  in.  These protocol replacement  strings are entered by
     pressing Control-P  followed by specific key.   The keys  used for the
     protocols below are as follows:

          Control-P  U   -    [UL Directory]
          Control-P  C   -    [Current Dir]
          Control-P  P   -    [Port]

     See the  T.A.G. Main Documentation  for information on  other protocol
     replacement strings is they are necessary for your system.

     Only option "7", (U)L string has been modified.

     NOTE:     These  upload  strings assume  you  have  your DSZ  protocol
               engine  in  the  Main  BBS Directory  (C:\BBS)  (Notice  the
               "[Current Dir]\dsz").  If you have DSZ in another directory,
               please  specify  the complete  path  in  place of  "[Current
               Dir]".

                         ** YModem Batch Upload **

7. (U)L string  : 
     "dszbatul [UL Directory] [Current Dir]\dsz port [Port] restrict rb" 

                        ** YModem-G Batch Upload **

7. (U)L string  : 
     "dszbatul [UL Directory] [Current Dir]\dsz port [Port] restrict rb -g"


                         ** ZModem Batch Upload **

7. (U)L string  :
     "dszbatul [UL Directory] [Current Dir]\dsz port [Port] restrict rz" 




Good luck and thanks for your continued support !!

                    __   __   __
                    /he  /AG  /eam