Re: Access Control

["Anthony E. Greene" <agreene pobox com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01-Sep-2002/22:59 -0400, Chen Shi-Ping <spchen aplcenMP apl jhu edu> wrote:
>I am running RH 7.2 (with Apache) on a LAN. I am trying to do access 
>control (i.e., username/password) on individual files without success.
>
>Here is what I did:
[snip]

It looks like you did everything correctly. I tested that setup on my home
machine and it worked. You should check to make sure that you did not make
any errors when typing the filenames and paths.

I suggest you move your password file out of the cgi-bin directory. Put it
in /var/www or some other place where Apache does not access in response
to file requests. It may be possible for someone to see part of your
security setup by retreiving the password file.

Tony
- -- 
Anthony E. Greene <mailto:Anthony%20E %20Greene%20%3Cagreene pobox com%3E>
OpenPGP Key: 0x6C94239D/7B3D BD7D 7D91 1B44 BA26  C484 A42A 60DD 6C94 239D
AOL/Yahoo Messenger: TonyG05    HomePage: <http://www.pobox.com/~agreene/>
Linux. The choice of a GNU generation <http://www.linux.org/>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Anthony E. Greene <mailto:agreene pobox com> 0x6C94239D

iD8DBQE9cxFUpCpg3WyUI50RAkR3AKC/Uh41OWZtxF8Q1FTXA9/BC0WsMwCeKOpo
xcBd6coBg5auYGUwnakdLZ8=
=jrOp
-----END PGP SIGNATURE-----