[wdvltalk] Re: stealing page content and images

2003-07-25 Thread Janet Russeau
If I remember correctly from my FrontPage 2002 class last fall-part of my degree requirement-you can download an entire site to your hard drive using FP. In order to FTP the modified files, you still have to have the proper Username and Password. This ability is supposed to be an "enhanced feat

[wdvltalk] Re: stealing page content and images

2003-07-23 Thread Cheryl D. Wise
Nothing to do with security on the webserver, it is only opening the page in your cache. FWIW, I've seen Apache sites that were very insecure and IIS sites that were locked down. Depends on the server admin. I can guarantee you any server running Apache that I administered would be in much worse

[wdvltalk] Re: stealing page content and images

2003-07-23 Thread Cheryl D. Wise
When you open a page with FrontPage all you are opening is the copy in your local temporary internet folder. You wouldn't be able to reload your changes to the server without userid/password. Same thing happens if I click the Open With button on my IE toolbar though I have multiple options there

[wdvltalk] Re: stealing page content and images

2003-07-23 Thread Jan
Greg That's what I was thinking, anyone can open a file but can't save it. A hacker would have to 'hack' into the site in order to do any type of damage right. And if they can't 'hack' into a site, no one can change or save a web page to that owner's site. Jan Cymbala, Greg wrote: You can "ope

[wdvltalk] Re: stealing page content and images

2003-07-23 Thread Cymbala, Greg
But you're working with a local copy, and can't save it to the server. Greg -Original Message- From: Conyers, Dwayne [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 23, 2003 12:13 PM To: [EMAIL PROTECTED] Subject: [wdvltalk] Re: stealing page content and images Interestin

[wdvltalk] Re: stealing page content and images

2003-07-23 Thread Conyers, Dwayne
Jan [mailto:[EMAIL PROTECTED] ink wired: > Dwayne > What do you mean by "complete access"? > Would you have been able to change the > code and "save it"? It appears so. I didn't test that theory because I didn't want to deface someone else's site... but all indications were that I could have do

[wdvltalk] Re: stealing page content and images

2003-07-23 Thread Jan
Dwayne What do you mean by "complete access"? Would you have been able to change the code and "save it"? Jan Conyers, Dwayne wrote: Interesting observation... I was goofing around with Microsoft FrontPage and opened a web page with it... expecting it to ask a password or something... but it gav

[wdvltalk] Re: stealing page content and images

2003-07-23 Thread Conyers, Dwayne
Interesting observation... I was goofing around with Microsoft FrontPage and opened a web page with it... expecting it to ask a password or something... but it gave me complete access. Can't imagine someone is serving a website without at least authentication. Explains how some pages get hacked.

[wdvltalk] Re: stealing page content and images

2003-07-23 Thread Jan
Sol, Great site http://www.isapirewrite.com, I'm there now. Thanks much for the info. Jan Sol Sinclair wrote: http://www.isapirewrite.com/ ISAPI_Rewrite is a powerful URL manipulation engine based on the regular expressions. It acts mostly like Apache's mod_Rewrite, but it is designed especial

[wdvltalk] Re: stealing page content and images

2003-07-23 Thread Sol Sinclair
Does anyone know if the same thing can be done if you have a windows server? http://www.isapirewrite.com/ ISAPI_Rewrite is a powerful URL manipulation engine based on the regular expressions. It acts mostly like Apache's mod_Rewrite, but it is designed especially for Microsoft Internet Informa

[wdvltalk] Re: stealing page content and images

2003-07-23 Thread Jan
I just read this article about image stealing: http://www.jimworld.com/gazette/issue-201/ "If your Web server runs on Apache (and most of them do), this problem can be easily solved. It does not require using separate software, but rather an Apache extension called "mod_rewrite." This extensi