Re: Extened - Re: securing sensitive information in CGI scripts

2001-09-05 Thread Rajeev Rumale
case of shared servers. Regards Rajeev - Original Message - From: "Curtis Poe" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, September 05, 2001 11:53 PM Subject: Re: Extened - Re: securing sensitive information in CGI scripts > --- Rajeev Rumale &

Re: Extened - Re: securing sensitive information in CGI scripts

2001-09-05 Thread Curtis Poe
--- Rajeev Rumale <[EMAIL PROTECTED]> wrote: > I need to store some uploaded files from the "visitors" into some > directories which are inside website root. Rajeev, Why do you need to store them there? If you can answer that for us, we can give you much better advice on how to secure it. Che

Re: Extened - Re: securing sensitive information in CGI scripts

2001-09-05 Thread Gunther Birznieks
This is a very different security question. Basically I think there are two major classes of solution. One is based on randomness and the other is based on a harder core ACL check in the CGI itself and requires the CGI control access to the file more tightly. In Detail: One way which isn't t

Extened - Re: securing sensitive information in CGI scripts

2001-09-04 Thread Rajeev Rumale
Greetings to all, This is really a good thread we have. How ever as the title is not restricting to database security. I would like to add my concern to it. I need to store some uploaded files from the "visitors" into some directories which are inside website root. Since the files submited are