On Mon, 17 Mar 2003, Jim Cole wrote:

> I don't think there is a way to actually query htsearch directly, but 
> if you run the 'strings' command against htsearch, you can probably 
> pick out the path. I would start with something like the following.

No, and in fact if you could query htsearch directly to get the config
directory, it could be used by a remote exposure attack. In other words,
htsearch as a CGI should *not* be able to reveal this.

--
-Geoff Hutchison
Williams Students Online
http://wso.williams.edu/



-------------------------------------------------------
This SF.net email is sponsored by:Crypto Challenge is now open! 
Get cracking and register here for some mind boggling fun and 
the chance of winning an Apple iPod:
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0031en
_______________________________________________
htdig-general mailing list <[EMAIL PROTECTED]>
To unsubscribe, send a message to <[EMAIL PROTECTED]> with a subject of unsubscribe
FAQ: http://htdig.sourceforge.net/FAQ.html

Reply via email to