bugGNU nano - Bugs: bug #30749, [Request] allow suppressing the...


bug #30749: [Request] allow suppressing the creation of .save files

Submitted by:  Ren Lawrence <renlawrence>
Submitted on:  Wed 11 Aug 2010 03:21:20 PM UTC  
Severity: 1 - WishStatus: None
Assigned to: NoneOpen/Closed: Open

Add a New Comment (Rich MarkupRich Markup):

You are not logged in

Please log in, so followups can be emailed to you.


Tue 21 Jun 2016 06:01:26 PM UTC, comment #4:

I don't quite see what the problem with creating .save files is. 1) Directly editing a live site means taking risks. 2) Having the directory open so that users can see what files are there shouldn't be done either. (Or do you think some people would scower the internet, typing .save after every URL they can think of, hoping to find a file that was edited with nano and during which editing nano crashed? And that they then study this .save file hoping to find weaknesses in the PHP or other script that it contains?)

Anyway, the permission bits are okay. And it really is a problem of Apache that it does not treat/serve some files properly. But... granted, not wanting to have these .save files popping up unrequested is a legitimate wish. So I am changing the bug's title to that effect.

Benno Schulenberg <bens>
Project Administrator
Tue 17 Aug 2010 05:35:55 PM UTC, comment #3:

Hey Ren,

Oh, do you mean that we are not properly saving the execute bit when writing a .save file? That we may be able to fix if so, I'll check it out when I get home.

Chris Allegretta <astyanax>
Project Administrator
Wed 11 Aug 2010 03:39:40 PM UTC, comment #2:

Although it may still be an issue for languages other than PHP.

I noticed .pl.save is served as plain-text by default.

Ren Lawrence <renlawrence>
Wed 11 Aug 2010 03:29:35 PM UTC, comment #1:

Please disregard this ticket. I am wrong.

Anything with the suffix .php.save will still be executed and served properly.

Ren Lawrence <renlawrence>
Wed 11 Aug 2010 03:21:20 PM UTC, original submission:

This is not necessarily a bug or even something that you should be responsible to change.

However, I thought it was worth bringing to your attention that the default behavior of Apache will serve any .save files as plain-text. Often these are source files of interpreted languages.

A quick Google search of "filetype:save php" will show you the severity of this problem.

Apache can easily be configured to not serve .save files, but I am worried that many users would not know about nano's emergency feature to dump the buffer to .save files.

My suggestion would be the ability to configure this feature to be on or off, with a default setting of off. The ability to configure the emergency dump suffix would also be useful.

Ren Lawrence <renlawrence>


(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):

No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -unavailable- added by bens (Posted a comment)
  • -unavailable- added by astyanax (Posted a comment)
  • -unavailable- added by renlawrence (Submitted the item)

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.


    Please enter the title of George Orwell's famous dystopian book (it's a date):



    Follow 6 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Tue 21 Jun 2016 06:01:26 PM UTCbensSeverity3 - Normal=>1 - Wish
      StatusIn Progress=>None
      Assigned toastyanax=>None
      Summary.save files are served as plain-text by Apache web servers=>[Request] allow suppressing the creation of .save files
    Tue 17 Aug 2010 05:35:55 PM UTCastyanaxStatusNone=>In Progress
      Assigned toNone=>astyanax

    Back to the top

    Powered by Savane 3.1-cleanup