Page 1 of 1 1
Topic Options
#111260 - 2004-01-05 04:55 PM .Kix File Association?
Glenn Barnas Administrator Offline
KiX Supporter
*****

Registered: 2003-01-28
Posts: 4402
Loc: New Jersey
When we install Kix, we associate .KIX with Kix32.exe, and .KXW with WKix32.exe. We also add .KIX & .KXW to the PathExt variable, so when we type
Code:
 script 

it executes script.kix or script.kxw. One of our teammates has suggested that we change the default association to READ (open in NotePad) instead of EXECUTE, because "some idiot could double-click a .KIX file and run something they shouldn't"

I don't really agree, but am willing to entertain comments.. anyone?

Thanks!

Glenn
_________________________
Actually I am a Rocket Scientist! \:D

Top
#111261 - 2004-01-05 05:00 PM Re: .Kix File Association?
Sealeopard Offline
KiX Master
*****

Registered: 2001-04-25
Posts: 11165
Loc: Boston, MA, USA
The only reason I see to have KiXtart scripts be executed automatically based on the extension is if you want to integrate KiXtart scripts into AD without using a batch file to call them. See How-TO: Run KiXtart scripts via LPO/GPO .

However, in general, I'd rather associate KiXtart extensions with Notepad or any other text editor in order to prevent unintentional running of KiXtart scripts. The same applies to VBScript/JavaScript extensions.


Edited by sealeopard (2004-01-05 05:16 PM)
_________________________
There are two types of vessels, submarines and targets.

Top
#111262 - 2004-01-05 05:07 PM Re: .Kix File Association?
Richard H. Administrator Offline
Administrator
*****

Registered: 2000-01-24
Posts: 4946
Loc: Leatherhead, Surrey, UK
Yup agreed - always associate the script's default action with an editor where possible.
Top
#111263 - 2004-01-05 05:12 PM Re: .Kix File Association?
Glenn Barnas Administrator Offline
KiX Supporter
*****

Registered: 2003-01-28
Posts: 4402
Loc: New Jersey
Hmm, so you start every script by
Code:
 kix32 scriptname 


??
_________________________
Actually I am a Rocket Scientist! \:D

Top
#111264 - 2004-01-05 05:17 PM Re: .Kix File Association?
Les Offline
KiX Master
*****

Registered: 2001-06-11
Posts: 12734
Loc: fortfrances.on.ca
That's how I start mine (ScriptName.KiX). I do not use any association at all, not even to NotePad. When my scripts are in development, I use the TXT extension and rename it to KiX only when it goes into production.

Edited by Les (2004-01-05 05:20 PM)
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.

Top
#111265 - 2004-01-05 05:18 PM Re: .Kix File Association?
Sealeopard Offline
KiX Master
*****

Registered: 2001-04-25
Posts: 11165
Loc: Boston, MA, USA
Yes, or even
Code:

KIX32 SCRIPT.KXS

as I am converting to .KXS as the default extensions for 'KiXtart Script' and .KXF as the default extension for 'KiXtart User Defined Function' containing a single UDF.
_________________________
There are two types of vessels, submarines and targets.

Top
#111266 - 2004-01-05 05:19 PM Re: .Kix File Association?
Wizard Offline
Hey THIS is FUN
*****

Registered: 2000-12-05
Posts: 264
Loc: Bristol, England
I also change the default association of .REG files for the same reason.!
_________________________
Wizard
There's no place like 127.0.0.1

vb | kix | batch | html | cfm | js | english

Top
#111267 - 2004-01-05 05:37 PM Re: .Kix File Association?
Glenn Barnas Administrator Offline
KiX Supporter
*****

Registered: 2003-01-28
Posts: 4402
Loc: New Jersey
OK - but couldn't the same logic be applied to Perl (.PL) files? What about .BAT or CMD?? And creating a .BAT file to invoke Kix32 and a specific script (or perl or VBS, for that matter) - is that any less dangerous? In our group discussion, only the .Kix files were singled out.

BTW - my policy is to place all scripts in a specific folder with only Admin access rights, so inadvertant access is pretty unlikely.

Glenn
_________________________
Actually I am a Rocket Scientist! \:D

Top
#111268 - 2004-01-05 05:47 PM Re: .Kix File Association?
Radimus Moderator Offline
Moderator
*****

Registered: 2000-01-06
Posts: 5187
Loc: Tampa, FL
I have kix associated with notepad on my development machine, and with nothing on the client machines.
_________________________
How to ask questions the smart way <-----------> Before you ask

Top
#111269 - 2004-01-05 06:12 PM Re: .Kix File Association?
Kdyer Offline
KiX Supporter
*****

Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
I know that MCA's KIXnnnRegistry.EXE or KIXnnnUPDATE.EXE files do the association as well.

Kent
_________________________
Utilize these resources:
UDFs (Full List)
KiXtart FAQ & How to's

Top
#111270 - 2004-01-05 06:55 PM Re: .Kix File Association?
MCA Offline
KiX Supporter
*****

Registered: 2000-04-28
Posts: 5152
Loc: Netherlands, EU
Dear,

We are waiting for definitive changes in the file associations, when Ruud has publish his definitive choose.
greetings.
_________________________
email scripting@wanadoo.nl homepage scripting@wanadoo.nl | Links | Summary of Site Site KiXforms FAQ kixtart.org library collection mirror MCA | FAQ & UDF help file UDF kixtart.org library collection mirror MCA | mirror USA | mirror europe UDF scriptlogic library collection UDFs | mirror MCA

Top
#111271 - 2004-01-05 08:56 PM Re: .Kix File Association?
Kdyer Offline
KiX Supporter
*****

Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
If that is the case, we need to update the BKM FAQ too. For example, we need to insure that the .SCR is removed too.

Kent
_________________________
Utilize these resources:
UDFs (Full List)
KiXtart FAQ & How to's

Top
#111272 - 2004-01-05 09:27 PM Re: .Kix File Association?
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11631
Loc: CA
Glenn,

Adding an automatic association on your own system is one thing, but adding it to your user's Workstations is where the possible issue may arise.

VBS is automatically associated by Microsoft and that is what allowed the rise in VBS script type viruses. Nothing is evil about WSH and the VBS language, but rather how it was used for evil intent.

Most Enterprise email systems now days automatically either block or strip out .CMD .BAT .COM .EXE .VBS .HTA etc...

Scripting languages allow a much greater ability to silently damage a system then just a typical .BAT alone can.

By setting up your desktops to have a file association with KIX32.EXE or WKIX32.EXE will place KiXtart in the same predicament as Windows Scripting Host and VBS files.

No one thought anything about VBS accept a useful scripting tool until someone came along and used it in a negative method in the form of MELISSA

I don't think any of the Antivirus vendors write any code to try and trap a rouge KiX script as they do now days for VBS files. One could some day perhaps get hammered by an email sent to users that would run a KiXtart script that damaged their system just like a VBS file can. By not associating KiXtart the ability to perform such a task is extremely minimized.

Hopefully the above scenario would never happen. However, one needs to reason why you really need the association and if the benefit outways any possible risks.

Top
#111273 - 2004-01-05 10:17 PM Re: .Kix File Association?
Kdyer Offline
KiX Supporter
*****

Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
Doc,

I am in complete agreement.

Two things to think about here.. If you create the association as a Developer, that is one thing. If you create the association for the common user and they "automatically" run kix files, I would be hesitant to do that. Sure, at logon, this is fine, but by happenstance, it would exhibit behavior like that of VBS or WSH. Right now, KiX has a pretty good reputation as being clean and if we got the bad-boy behavior, it would definitely smudge it's reputation.

Kent
_________________________
Utilize these resources:
UDFs (Full List)
KiXtart FAQ & How to's

Top
#111274 - 2004-01-05 10:53 PM Re: .Kix File Association?
Glenn Barnas Administrator Offline
KiX Supporter
*****

Registered: 2003-01-28
Posts: 4402
Loc: New Jersey
Ah... here's the distinction!

I was referring to administrative scripts on my servers. We have no scripts on workstations - in fact, we have no workstations that we support! I've never enabled scripting on a user workstation (other than login scripts, and then the KIX executable is usually on the login server). I always utilize scripts on the servers for the admins that support them, however. They're restricted to admin access for execute.

We're effectively an ASP - we have a few hundred servers that we manage, and often utilize scripting tools - .KIX and .PL - to accomplish and automate our tasks. Only people on the administrative staff have access to these systems (via console - all other access is via application such as web, SQL, and such). The only user's we have that can log on to the server and possibly execute these commands are our own admin and support staff. Further, the KIX executable is in the same folder (with same access perms) as the scripts, so a "rogue" script should be of little consequence.

Does this change your perspective any?

Glenn
_________________________
Actually I am a Rocket Scientist! \:D

Top
#111275 - 2004-01-05 11:00 PM Re: .Kix File Association?
MCA Offline
KiX Supporter
*****

Registered: 2000-04-28
Posts: 5152
Loc: Netherlands, EU
Dear,

We are using only kixtart file associations on clients who are working on kixtart scripting.
Normal users don't have any file association to it. Also all kind of unwanted associations
are removed during each logging on.
A normal user aren't editting, debugging or creating any kixtart script.
greetings.
_________________________
email scripting@wanadoo.nl homepage scripting@wanadoo.nl | Links | Summary of Site Site KiXforms FAQ kixtart.org library collection mirror MCA | FAQ & UDF help file UDF kixtart.org library collection mirror MCA | mirror USA | mirror europe UDF scriptlogic library collection UDFs | mirror MCA

Top
#111276 - 2004-01-05 11:21 PM Re: .Kix File Association?
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11631
Loc: CA
No Glenn,

It does not change my perspective (with respect to the desktop). However it does now give me more information to agree with you. No reason why you can't run KiXtart on a Web Server like .PL does. We have done it here before on a Server for testing and it seemed to work fine.

I think Lonkero even ran it on his Server in a similar manner.

Top
Page 1 of 1 1


Moderator:  Arend_, Allen, Jochen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 837 anonymous users online.
Newest Members
ManuvdWielNL, Sir_Barrington, batdk82, StuTheCoder, M_Moore
17887 Registered Users

Generated in 0.169 seconds in which 0.125 seconds were spent on a total of 12 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org