Bugtraq mailing list archives

Re: More fun with WWWBoard


From: vlad () SANDY RU (Vladimir Dubrovin)
Date: Wed, 22 Sep 1999 10:16:51 +0400


Hello Chris Ridd,

20.09.99 16:24, you wrote: More fun with WWWBoard;

C> In Apache you'd configure this as follows:

C> <Files passwd.txt>
C> deny from all
C> </Files>

or put it in some directory inside your web home and configure

<Limit GET>
deny from all
</Limit>

<Limit POST>
deny from all
</Limit>

for  this  directory.  It's more safe, because some text editors leave
backup copy of the file, for example passwd.txt~. In this case you are
safe even if you forget to remove this file.

  +=-=-=-=-=-=-=-=-=+
  |Vladimir Dubrovin|
 =+=-=-=-=-=-=-=-=-=+=-=


Current thread: