scanning uploaded documements for viruses in CF

[Nick Way]

hi guys

currently everytime a user uploads a document to our application it is emailed to one of our pc's in the office where we scan it for viruses and then (assuming it's ok) we then make an entry in the application's database to state that that user's document is ok so they can do stuff with it

bit of a long way round, so i'm hoping to implement something that is all based on the server

eg:

1 user uploads document to server
2 cf reads filename of document
3.cf then passes the filename/path to some antivirus tool installed on the server
4.this antivirus tool scans just that document
5.the antivirus tool then feedsback to cf
6.coldfusion takes necessary action:
-if document ok, mark as such in db
-if document bad, cf deletes it and warns user they may have a virus (and warns us they may be a hacker!)

i can do all of this easy peasy, except steps 3,4 and 5

does anyone have any advice for me?

my isp has Dr.Web® anti-virus for Windows installed on our server so it'd be good to use that if poss - anyone know how cf can talk to it?

if not does anyone have any other suggestions?

thanks very much in advance

kind regards

Nick

[Newsgroup_User]

> 3.cf then passes the filename/path to some antivirus tool installed on the
> server
> 4.this antivirus tool scans just that document
> 5.the antivirus tool then feedsback to cf

The easiest way to "pass the [file] to some antivirus tool installed on the
server" is to just let CF try to write the file to disk. Provided the AV
scanner is running real time, it'll pick up the attempt to write to disk
and block it if there's a problem. This will bubble up to CF as a "can't
write file" exception.

There's a "test virus" called eicar.com
( http://en.wikipedia.org/wiki/Eicar_test_file) which is harmless, but all
AV scanners are programmed to pick it up as a threat. You can use it to
test you upload code.

--
Adam

[Nick Way]

Thanks Adam

That sounds like a nice simple solution - thanks very much indeed, I really appreciate your reply - thank you.

Any more for any more?

Cheers

Nick