Re: [users@httpd] Basic Authentication question

2005-07-14 Thread zcat
K Anand wrote: That was my understanding alsoBut in my case, it is again prompting me for userid and password for subsequent pages also...Actually, it asks password 2 times when opening the main page..after that it does not ask for the password... http://ns.sail-steel.com/ userid is guest a

Re: [users@httpd] Basic Authentication question

2005-07-14 Thread zcat
The browser prompts me for userid and password... now i click a link on that page and say the request goes as http://a.b.c.d/xyz.html Will it prompt again for user id and password ?? The browser keeps the username and password for the rest of the session, and will automatically send them with e

Re: [users@httpd] irc eggdrop exploit woes

2005-06-06 Thread zcat
Eben Goodman wrote: I actually know which user it got through on, it came in through an insecure php nuke application. I have since removed the nuke app, but the damage appears to be done, since this eggdrop crap is still running on the server. Is there a way to find, and remove the software

Re: [users@httpd] Apache improvement suggestion

2005-05-11 Thread zcat
1. How do I check for *no* referer field ? Apache usually prints "-" in the log if the referer is not defined. But it depends on whatever you are using to check the referer in the first place. Right. You need to tell us the blocking method you are using. An example is here: http://httpd.apache.or