Menu

#27 unchecked wwwroot lets clients serve root directory

open-accepted
nobody
None
5
2004-04-27
2004-04-23
No

just enter / as wwwroot when creating a new vhost
then click through the whole webhost (OK, you can
only read with permissions of the webserver process)

delete vhost: delete root directory -> filehost ends
his life

sugggestion: don't allow clients/resellers to adjust
the wwwroot

Discussion

  • Joerg Delker

    Joerg Delker - 2004-04-27

    Logged In: YES
    user_id=43997

    Concerning clients/resellers this is indeed a problem, which
    is basically caused by the very much incomplete
    implementation of client/reseller logic. Coders needed here!

    For admin level this is ok and probably unavoidable, since
    your wwwroot can possibly lie anywhere.

    And finally: Anybody can/should adjust the
    create.../delete... scripts for their site individually
    (that's why they're there).
    So if deletion is too dangerous, you may evacuate the dirs
    to another location.

     
  • Joerg Delker

    Joerg Delker - 2004-04-27
    • labels: 423654 -->
    • milestone: 369940 -->
    • status: open --> open-accepted
     

Log in to post a comment.

Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.