-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Joshua,
I'm sorry, forgive my naivety, FrontPage does *not* require FTP/SSH? I always thought FP was frontend for FTP and web development. I have never used FrontPage. I have seen the interface by accident on Windows boxes when opening a web document and it defaulted, but always quit pretty quickly.
Can you elaborate?
Regards, Tim
On Dec 12, 2004, at 1:56 PM, Joshua Levitsky wrote:
Usually it is said that if you give someone frontpage then you should take away FTP / SSH access from them. I believe the frontpage client itself will not let someone manipulate the files.. though I suppose someone could make a PHP file that would do it right?
Just not sure. Better a question to ask of www.rtr.com who make the extensions and enforce this rule.
-- Joshua Levitsky, MCSE, CISSP Haz-Mat III BBS -- telnet bbs.haz-matiii.com Trade Wars 2002 / Ambrosia / Global War / Fidonet Feeds [5957 F27C 9C71 E9A7 274A 0447 C9B9 75A4 9B41 D4D1]
----- Original Message ----- From: "Timothy Stone" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, December 10, 2004 6:36 PM
Subject: [Apache-FP] Security, or do I really want to do this?
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
I really don't want to deploy FrontPage extensions on my server, a production server for a major client, but I'm getting a lot of pressure from "business".
A concern of mine:
"The next step is to edit the /etc/httpd/conf/httpd.conf and set AllowOverride to All which is set to AllowOverride None as default."
There are very good reasons AllowOverride defaults to None. Are there suggested deployment options to limit the use of the AllowOverride to specific document roots versus using the broad brush and allowing unlimited .htaccess files?
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (Darwin)
iD8DBQFBujMENsfkZJstizoRApJBAJ9qo0I9Nl+sidxfrEwyA35diy6PfACeKkPR TDvq5D/syjczNskWfqVjTpg= =UYq0 -----END PGP SIGNATURE-----
_______________________________________________ Apache-FP mailing list [EMAIL PROTECTED] http://lists.joshie.com/mailman/listinfo/apache-fp
Donations: http://www.amazon.com/paypage/PT5LZITM9L227
_______________________________________________ Apache-FP mailing list [EMAIL PROTECTED] http://lists.joshie.com/mailman/listinfo/apache-fp
Donations: http://www.amazon.com/paypage/PT5LZITM9L227
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (Darwin)
iD8DBQFBvMQsNsfkZJstizoRAgBwAKCA4ilzcPcD/qp1zf+RHdJb+wP4cACgyHzH tklDWZFkG+IWlQTHcRToUOs= =gN/4 -----END PGP SIGNATURE-----
_______________________________________________ Apache-FP mailing list [EMAIL PROTECTED] http://lists.joshie.com/mailman/listinfo/apache-fp
Donations:
http://www.amazon.com/paypage/PT5LZITM9L227
