Re: [EMAIL PROTECTED] Re: Apache Security Problem

2008-05-30 Thread Scott Gifford
Andre Hübner <[EMAIL PROTECTED]> writes: > Hi, > >>> You can do restrictions of particular options using the technique >>> shown her= >>>e: >>>http://httpd.apache.org/docs/2.2/howto/htaccess.html#how > >>>But I have a feeling that there are other ways around your separation. >>>It depends on exact

[EMAIL PROTECTED] Re: Apache Security Problem

2008-05-18 Thread Andre Hübner
Hi, You can do restrictions of particular options using the technique shown her= e: http://httpd.apache.org/docs/2.2/howto/htaccess.html#how But I have a feeling that there are other ways around your separation. It depends on exactly the details of how you are running your scripts. Joshua

Re: [EMAIL PROTECTED] Re: Apache Security Problem

2008-05-15 Thread Joshua Slive
On Thu, May 15, 2008 at 3:36 AM, Andre Hübner <[EMAIL PROTECTED]> wrote: > > sorry, I think i verbalized not clear enough. ;) > essence is following: The way of creating a symlink is irrelavant. In Most > cases this is a script, but symlink is also creatable by just unpacking a > archive with sy

[EMAIL PROTECTED] Re: Apache Security Problem

2008-05-15 Thread Andre Hübner
Hi, I'm a little confused by exactly what problem you are trying to solve. Am I right that you could do exactly the same thing by just having your CGI script copy the relevant file into the webspace rather than using a symlink? If so, then this is just the standard issue with privilege separa