I would normally be more concerned about such issues. But in this case it will just be a handful of people i know who would be writing any psp pages. This is for a bio lab and for a few people who work in the lab and need to make changes to pages occasionally. So its not going to be just random people. If someone does abuse it, we know where they live :)

ian

At 07:03 AM 7/2/2003, you wrote:
Be careful about security. If you are planning to run a single instace of webware for multiple users realize that contexts can talk to each other. So if I have a db connection in a context called metronycom another user can call
import dbConnection from metronycom and get by connection code.


Also a psp can do anything a python module can do, like erase a drive of spawn treads in a loop.

-Aaron
(I setup webware on one of my dedicated servers and at first I thought of this, but then I decided to run multiple webware instances, each one running as a different user.)


Ian wrote:

At 05:59 AM 7/1/2003, you wrote:

Ian wrote:
> At 01:17 AM 7/1/2003, you wrote:
>> Ian wrote:
>>> here are the various lines in my httpd.conf file relating to
>>> webware: LoadModule webkit_module modules/mod_webkit.so
>>> AddType txt/psp .psp
>>> AddHandler psp-handler .psp
>>
>> Shouldn't you have something like this in there too?
>>
>> <Location /webware>
>>   WKServer localhost 8086
>>   SetHandler webkit-handler
>> </Location>
>>
>> Nick
>
> I'm pretty sure that in one of the readme files it said that was only
> needed under certain conditions. And in any case, since the appserver
> IS getting the psp requests, i dont think thats the issue, is it?
> Whenever i request a psp page, apache does pass the request to the
> app server because i see it scroll past in the console, and the 404
> error is the error message from webware, not apache's 404 error
> message.

In my httpd.conf the only Webware-related lines I have are:

LoadModule webkit_module modules/mod_webkit.dll
<Location /WebKit>
        WKServer localhost 8086
        SetHandler webkit-handler
</Location>

I don't have the psp-related lines that you have.

I suggest you try adding these lines to your httpd.conf and see if it helps.


This worked!! Thank you!

So for future reference, if i want psp pages to work under someone elses apache directory I'll have to create a <location> directive for each user? Right now i created one called <location /~merk/test> and that worked for me.

Ian


------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01 _______________________________________________ Webware-discuss mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/webware-discuss



-- -Aaron http://www.MetroNY.com/ "I don't know what's wrong with my television set. I was getting C-Span and the Home Shopping Network on the same station. I actually bought a congressman." - Bruce Baum





-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01
_______________________________________________
Webware-discuss mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/webware-discuss



------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01 _______________________________________________ Webware-discuss mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/webware-discuss

Reply via email to