RE: Writable dirs

2004-06-17 Thread Jan Eden
Thanks to Brian, Wiggins and Bill, Spindler, Brian wrote on 15.06.2004: >What is the directory on the server? Is it visible to the outside >world? sorry for not answering your hints for so long. Yes, the dir is below the webserver's document root. I will try using PUT and DELETE to get into

Re: Writable dirs

2004-06-15 Thread Wiggins d Anconia
> Hi, > > a friend of mine uses a certain directory to upload files to. This directory has write permissions for all, since his cgi script has to store the files in it. > This is a common myth. The directory only has to have the permissions it needs, how much control you have over the directory a

Writable dirs

2004-06-15 Thread Jan Eden
Hi, a friend of mine uses a certain directory to upload files to. This directory has write permissions for all, since his cgi script has to store the files in it. He does not believe that this could be a security issue. Is there a simple method to delete something from this directory (or write