lin-club  

Re: [Haifux] Re: Re: [sct-hackers] Re: Syscalltrack Site

Orna Agmon
Wed, 26 Jun 2002 09:38:27 -0700

On Wed, 26 Jun 2002, Sagi Bashari wrote:

> From: "Orna Agmon" <[EMAIL PROTECTED]>
> > On Wed, 26 Jun 2002, Shlomi Fish wrote:
> >
> > >
> > > Please change it to civil URLs:
> > >
> > > http://sct.sf.net/
> > > http://sct.sf.net/howto.phtml
> > > http://sct.sf.net/shirts.phtml
> > >
> > > Etc. My suggestion is that you create a common library and have the
> > > scripts as stubs to it.
> >
> > I do not have scripts. I have but one script. All the htmls are stubs to
> > it. And I must use the URL as it is, in order to call the script with a
> > parameter, telling it what stub to insert.
> >
>
> Why won't you just use filename.php instead and load the template from there
> (include header.php in the beggining and footer.php in the end) instead of
> including the HTML file from the script?

If you took the trouble of looking at the code, available via the cvs
tree, to which there is a link from the site, you would have seen that
this is *exactly* what I did.
file head.html is the header, file tail.html is the footer.
in file index.php, you can see I was not "lazy", and I took the extensive
trouble of actually opening three files.

To me it did not seem like trouble, but to each his own.

>
> If you're too lazy to have two include calls in every content file you can
> use auto prenend/append in .htaccess to automaticlly load them (see the php
> manual).
>
> Oh and by the way, the way that you currently work with is very insecure.
> You can load external URLs that way, and possibly even execute code on the
> server. (See http://syscalltrack.sourceforge.net/index.php?Frame=/etc/passwd
> for example).

You are right.
Site is being taken down for security reasons.


>
> Sagi
>
>
>
>
>

-- 
Orna.   |  http://tx.technion.ac.il/~agmon

There are only 10 types of people in the world-
Those who understand binary, and those who do not.


--------------------------------------------------------------------------
Haifa Linux Club Mailing List (http://linuxclub.il.eu.org)
To unsub send an empty message to [EMAIL PROTECTED]