I considered that but I didn't think this presented any risk to the 
user. The only security risk would perhaps be to my server but that's 
not an issue. There's nothing that can be done with those ftp 
credentials besides upload to the specified directory. What am I not 
considering...god don't tell me I'm losing my mind (im turning 30 this 
year lol)




On 02/26/2014 05:58 PM, Alex Filgueira wrote:
>
> In src/slides.py:
>
> > +
> > +    def send_log_after_fatal_event(self):
> > +        # Rename the log to current date/time
> > +        log = '/tmp/cnchi.log'
> > +        d = datetime(1,1,1).now()
> > +        new_log = (d.strftime('%Y-%m-%d_%I.%M.%S-%p') + '.log')
> > +        try:
> > +            os.rename(log, os.path.join('/tmp', new_log))
> > +        except OSError:
> > +            logging.debug("Could not rename cnchi.log")
> > +        # Upload to server using FTP
> > +        try:
> > +            logging.debug("Uploading %s" % new_log)
> > +            local = open(new_log, 'rb')
> > +            remote = FTP('ftp.antergos.info')
> > +            remote.login(user='cnchi@antergos.info', passwd='(S?]ZJ=_k^,I')
>
> I don't think you should do it like this...
>
> We could have a php file (or whatever) getting the info somewhere 
> instead to be more secure
>
> —
> Reply to this email directly or view it on GitHub 
> <https://github.com/Antergos/Cnchi/pull/134/files#r10106113>.
>

-- 
*Dustin Falgout*
Antergos Developer

E-mail: dustin@falgout.us <mailto:dustin@falgout.us>
Google/Skype: dustinfalgout
Freenode IRC: #antergos 
<http://webchat.freenode.net/?channels=antergos&uio=d4>

Antergos <http://antergos.com>