this would require an ssh connection as well I think...
Chris
On Mar 15, 6:06 pm, Christopher Steel wrote:
> On Mar 14, 2:51 pm, Albert Abril wrote:
>
> > Hi!
>
> > There's some way to check to check from the browser if a web is running
> > web2py?
> > For example, Could i know ifwww.web2py.com
Nope.
The default is 404... but I do think it should say 404 instead of
Invalid Function But thats configurable in routes.py :)
-Thadeus
On Mon, Mar 15, 2010 at 7:08 PM, Richard wrote:
> On Mar 16, 7:31 am, Thadeus Burgess wrote:
>> I have
>>
>> routes_onerror( (*/*, '/init/default/err
On Mar 16, 7:31 am, Thadeus Burgess wrote:
> I have
>
> routes_onerror( (*/*, '/init/default/error') )
>
> the controller just brings up a search based on the requested_uri.
>
> -Thadeus
do you reckon web2py should do this by default?
--
You received this message because you are subscribed to t
On Mar 14, 2:51 pm, Albert Abril wrote:
> Hi!
>
> There's some way to check to check from the browser if a web is running
> web2py?
> For example, Could i know ifwww.web2py.comis running web2py from the
> browser?
>
> Just curious.
> Thanks.
Depending on your host OS you could should be able to
* I was considering re-routing all mispelled urls to a default error page*
Maybe, setting it by default, could be a secure feature.
On Mon, Mar 15, 2010 at 9:31 PM, Thadeus Burgess wrote:
> I have
>
> routes_onerror( (*/*, '/init/default/error') )
>
> the controller just brings up a search base
I have
routes_onerror( (*/*, '/init/default/error') )
the controller just brings up a search based on the requested_uri.
-Thadeus
On Mon, Mar 15, 2010 at 1:10 PM, Magnitus wrote:
> On Mar 14, 9:58 pm, Graham Dumpleton
> wrote:
>> You can potentially also use any error page as a tell tale
On Mar 14, 9:58 pm, Graham Dumpleton
wrote:
> You can potentially also use any error page as a tell tale fingerprint
> if defaults are used as different frameworks are going to each have
> their own.
Not only that, I find it very revelative that it states whether the
app is wrong, the controller
Hey let's throw a wrench in a pick IIS server error pages! :P
---
j
On Mon, 2010-03-15 at 02:06 -0700, mdipierro wrote:
> good point.
>
> On Mar 14, 8:58 pm, Graham Dumpleton
> wrote:
> > You can potentially also use any error page as a tell tale fingerprint
> > if defaults are used as different
good point.
On Mar 14, 8:58 pm, Graham Dumpleton
wrote:
> You can potentially also use any error page as a tell tale fingerprint
> if defaults are used as different frameworks are going to each have
> their own.
>
> For example:
>
> http://www.web2py.com/examples/default/xxx
>
> Returns:
>
> inva
You can potentially also use any error page as a tell tale fingerprint
if defaults are used as different frameworks are going to each have
their own.
For example:
http://www.web2py.com/examples/default/xxx
Returns:
invalid function
The idea of an 'invalid function' could be viewed as distinct
if /default/index aliases to the main page then it is
likely web2py.
On Mar 15, 5:51 am, Albert Abril wrote:
> Hi!
>
> There's some way to check to check from the browser if a web is running
> web2py?
> For example, Could i know ifwww.web2py.comis running web2py from the
> browser?
>
> Just curi
The fact is web2py_ajax.html is embedded in the page, not requested
separately. You have no direct access to this file via the client. It
includes calendar.js. I guess you can use IF_MODIFIED_SINCE to check
the datetime of calendar.js but this file was never modified.
On Mar 14, 5:24 pm, Thadeus
You can also check the servers datetime stamp of the web2py_ajax.html,
depending on this, you can know what version of web2py is actually
running(assuming it hasn't been edited)... so you can specifically
target web2py versions (based on date version came out) that have
known vulnerabilities.
-Tha
I cannot think if an way that works 100%.
I did not put any way to do it because security good practice requires
that there is no way to detect what software the server is running
because if a vulnerability is discovered, an attacked would be able to
detect which servers have the software with the
14 matches
Mail list logo
