Re: Proper way to keep users out of a directory

2003-07-16 Thread Gordon Messmer
Anton Piatek wrote: set the dir to be owned by group "httpd", make sure that the group can read the files. chgrp httpd files chmod 750 files So long as apache/httpd is run as userid "httpd" it can read the files, other users cant! One more thing that you must consider is that your users can prob

Re: Proper way to keep users out of a directory

2003-07-15 Thread Reuben D. Budiardja
On Tuesday 15 July 2003 12:57 pm, Ed Wilts wrote: > On Tue, Jul 15, 2003 at 12:40:33PM -0400, Scott Antonivich wrote: > > No, basically...I dont want anyone to be able to see the files or the > > actual php code itself. I think Anton's previous post was what I needed. > > So what stops somebody fro

Re: rh-l] RE: Proper way to keep users out of a directory

2003-07-15 Thread R P Herrold
On Tue, 15 Jul 2003, Rigler, Steve wrote: > Seriously...unless anyone can explain otherwise, being able to use > "wget" to download the source code to a cgi should be as effective > as using a browser to load a page and do "view source". > InterestingI never thought of wgetcan wget be

RE: Proper way to keep users out of a directory

2003-07-15 Thread Chris W. Parker
Rigler, Steve wrote: > Seriously...unless anyone can explain otherwise, being able to use > "wget" to download the source code to a cgi should be as effective > as using a browser to load a page and do "view source". You are right, that is all it does. It makes its requ

RE: Proper way to keep users out of a directory

2003-07-15 Thread Rigler, Steve
nt: Tuesday, July 15, 2003 12:04 PM To: [EMAIL PROTECTED] Subject: RE: Proper way to keep users out of a directory InterestingI never thought of wgetcan wget be prevented? Scott Antonivich General Manager Turnpike Technologies High Speed Internet Access for Home and Office Dialup, We

RE: Proper way to keep users out of a directory

2003-07-15 Thread Rigler, Steve
Wouldn't "wget" just download the output from execution of the php file? -Steve -Original Message- From: Ed Wilts [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 15, 2003 11:58 AM To: [EMAIL PROTECTED] Subject: Re: Proper way to keep users out of a directory On Tue, Jul 15

RE: Proper way to keep users out of a directory

2003-07-15 Thread Scott Antonivich
PROTECTED] Behalf Of Ed Wilts Sent: Tuesday, July 15, 2003 12:58 PM To: [EMAIL PROTECTED] Subject: Re: Proper way to keep users out of a directory On Tue, Jul 15, 2003 at 12:40:33PM -0400, Scott Antonivich wrote: > No, basically...I dont want anyone to be able to see the files or the actual > ph

Re: Proper way to keep users out of a directory

2003-07-15 Thread Ed Wilts
On Tue, Jul 15, 2003 at 12:40:33PM -0400, Scott Antonivich wrote: > No, basically...I dont want anyone to be able to see the files or the actual > php code itself. I think Anton's previous post was what I needed. So what stops somebody from simply doing a wget on the php file? You better test to

RE: Proper way to keep users out of a directory

2003-07-15 Thread Scott Antonivich
k.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Paul Barclay Sent: Tuesday, July 15, 2003 12:28 PM To: Red Hat List Subject: Re: Proper way to keep users out of a directory Do you mean you can get a listing of the directory via the web browser and th

Re: Proper way to keep users out of a directory

2003-07-15 Thread Paul Barclay
Do you mean you can get a listing of the directory via the web browser and this is what you want to stop? If so you have to tell apache not to allow the directory to be listed. I can't remember how to do it, at the moment, but I will have a look. It is someplace in /etc/httpd/conf/http.conf PB On

Re: Proper way to keep users out of a directory

2003-07-15 Thread Anton Piatek
easy. set the dir to be owned by group "httpd", make sure that the group can read the files. chgrp httpd files chmod 750 files So long as apache/httpd is run as userid "httpd" it can read the files, other users cant! Anton On Tuesday 15 Jul 2003 4:55 pm, Scott Antonivich wrote: > Hello All,