HP3000-L Archives

November 2000, Week 3

HP3000-L@RAVEN.UTC.EDU

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Doug Werth <[log in to unmask]>
Reply To:
Doug Werth <[log in to unmask]>
Date:
Tue, 21 Nov 2000 14:04:39 -0500
Content-Type:
text/plain
Parts/Attachments:
text/plain (38 lines)
Mark Bixby writes:

>
> 2) Specify Options +FollowSymLinks and create a symlink
> /APACHE/PUB/htdocs/ACCT  which points to /ACCT.  This will
> allow a browser to read all files below /ACCT.
>
> 3) Specify Options +FollowSymLinks and create a symlink
> /APACHE/PUB/htdocs/thefile which points to /ACCT/GRP/FILE.  Modify your
HTML to
> say HREF="/thefile", and then a browser click on it, the web server will
read
> /ACCT/GRP/FILE.

The FollowSymLinks option is also useful for creating CGI programs that
require special capabilities such as PH. A program requiring more
capabilities than IA,BA must reside in an MPE GROUP and not in an HFS
directory. You can create a symbolic link in the cgi-bin directory to run
such a program if you enable FollowSymLinks.


<Directory /APACHE/PUB/cgi-bin>
AllowOverride None
Options FollowSymLinks            <---- edit this line
</Directory>

IIRC the Apache documentation considers enabling this option to be a
potential
security problem. I personally don't see it that way, because any user who
can enter a symbolic link into the cgi-bin directory would also have the
ability of putting a program or script in that directory too. This is
no more of a security issue than any other directory on the machine.

Doug.

Doug Werth                             Beechglen Development Inc.
[log in to unmask]                               Cincinnati, Ohio

ATOM RSS1 RSS2