Web Hosting Talk







View Full Version : Help! Asp Allowes All Users To Add Files Anywhere On The Server


Haisoft
08-11-2001, 08:20 AM
Please coul someone help me, I have just descovered that all my clients can add files any where they want on the server using asp (I've got a raq4 with chilliasp).
Is there a way to set it to only be able to do this with one site and not the others, I want the users to still be able to create files but only on their own account !
Also, I cant create a file using php it says that it is not allowed, can I change the settings just for one site?

Finally, I've just instaled phpmyadmin, how do I securise config.inc.php I've used a chmod 660 but people can still download it and then open it to see the password ! Can you use a .httaccess but would I have to add each user to a list every time I added a new user? Is there a better way to do this.

Finally, how do you create a .httaccess, I'm new to telnet so could you tell me how to do it step by step please,

Richard

insequi
08-11-2001, 09:43 AM
Don't know about ASP, I've never used it.

If you like to created a password protected directory, do this:

Create a .htaccess file in the directory which contains:


AuthUserFile /home/sites/siteXY/users/username/passwd
AuthName "Bla Bla"
AuthType Basic

<Limit GET POST PUT>
require valid-user
</Limit>


Replace siteXY and username. Note: the file should not created below the web root, it's in the users home.

Telnet to your RAQ and cd to the user dir

cd /home/sites/siteXY/users/username

Create the passwd file

touch passwd

Add user to the passwd file

htpasswd /home/sites/siteXY/users/username/passwd username

htpasswd will ask you now for a password for this use. Now you're done.

joubarani
08-13-2001, 09:24 AM
Go to http://gossamer-threads.com/scripts/source/fileman.zip

I used it to created a password protected directory and more.

try it;)

Honu
08-13-2001, 03:31 PM
Originally posted by joubarani
Go to http://gossamer-threads.com/scripts/source/fileman.zip

I used it to created a password protected directory and more.

try it;)

Aloha
ditto that
we installed this for one of uor clients to add there own directories files etc control passwowrds
a great program

Haisoft
08-13-2001, 04:13 PM
Thanks I'll try it later !

Richard