I had successfully uploaded and have the DBman demo running. I noticed that my cgi-bin directory (where the dbman folder is in) is not protected. That means anyone could download my CGI files in that directory. How can I protect it so that the CGI files could still be used in that directory?

Second of all, I had played around the permission settings and have the following:

$auth_no_authentication = 1;
$auth_logging = 1;
$auth_allow_default = 1;
@auth_default_permissions = (1,0,0,0,0);
$auth_signup = 0;
@auth_signup_permissions = (1,0,0,0,0);
$auth_modify_own = 0;
$auth_view_own = 0;
$auth_user_field = -1;

Before I changed to the above settings I was able to delete/modify/add entries but now when I access the db.cgi file from my site, it just has the options of Home, View, List All and Log Off. I want to give permission to the admin only to add/modify/delete entries. But anyone can view the database.

Thanks in advance, appreciate the help.

The db.cgi is password protected. What you need to do is change your authentication permissions back to the default configurations OR check your permissions against the ones listed in the tutorials at:

http://www.jpdeni.com/dbman/

Regards,

Eliot Lee