Windows Thumbs.db system files that are in most of folders were uploaded with all other files from the localhost to the server.
Is it dangerous, if you forget to delete them on the server?
I am on shared hosting running *nix and Apache server.
Webmasters Stack Exchange is a question and answer site for webmasters. It only takes a minute to sign up.Sign up to join this community
There is no direct threat from having Thumbs.db uploaded, even if people were able to download them they wouldn't get any information worth having.
It does maybe highlight an issues with your upload process though, this is one of the reasons why FTP is an inefficient way to upload files, extra files that you may not have intended to upload will go up.
I still think this file can be threat in some cases.
e.g.: it is a security hole when you don't want everyone to know the full image list you have in specific directory the Thumbs.db compromises this information. It stores information about the file names, modification times, thumbnail images can be fetched from it as well.
I do not agree with the other answers. In some cases this is a low security risk but it could have a hugh impact. It is similar to allow directory browsing.
The attacker gets a list of file names that could be really bad if you think about a page like Facebook where images are pseudo hidden by there name.
If there would be a Thumbs.db in this folder you would get profile images and Facebook IDs of a few hundred users:
If there would be a Thumbs.db in every folder you could easily access all images and Facebook IDs of every single user. Using the ID you can query real names for every image, too. That would be hugh!
Also keep in mind that Thumbs.db are not updated by the server. So it it possible data of deleted images, too.
I would advice to delete all Thumbs.db from the web server. They do not belong there, they do not have any use, but they could be a risk.
Not it's not really dangerous, as the file is only used by Windows Explorer for the thumbnail cache: http://en.wikipedia.org/wiki/Windows_thumbnail_cache.
But I would advise you to not leave only unnecessary files on your server and to delete them when you switch to production mode.