On Sat, 2004-03-27 at 18:17, Gavin wrote: > I currently don't have the config file split up, but it is in a > non-context directory. Explain to me how a non-root user is going to > be > able to read from a users file?
Not sure what you're asking -- are you asking why I said putting the config file in a context directory might be a security concern? Putting it in a context means that it could be possible for someone to request the file using their browser (if they know or can guess the name), and the app server would send it to them. It's the same reason you wouldn't want to put any sensitive files in a public web-accessible directory. peace, Jason ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Webware-discuss mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/webware-discuss
