Gossamer Forum
Home : Products : Others : Fileman :

Security

Quote Reply
Security
Hi there. I own a virtual domain at a presence provider (World Wide Mart). Question: if I chmod my root directory, the one that the server is pointing my domain at, to 777, won't every one who logs into the shell be able to modify my files? My root directory's permissions are currently rwxr-xr-x. With Fileman, I can currently modify files in the /fileman directory only (permissions are set to 777 and the directory is protected via apache authentication). Any feedback will be greatly appreciated,

Kind regards,

Jesse Fitzgerald
jesse@cajun.com
Quote Reply
Re: Security In reply to
Hi Jesse,

Sorry for the late reply. Yes, setting your home directory will make your site vulnerable to people with shell access. A workaround is to use CGIwrap which will run your scripts under your own userid access (catch 22 here though, you can't password protect scripts which run under cgiwrap. We will be releasing a single version of the script with built in password controls shortly to fix that).

If you have any other questions, don't hesitate to ask!

Alex