Hello I would like to ask if someone could help me out with ASSP. I'm trying to add it to Gentoo Portage (package management system) and just don't know enough perl to figure this out. I've moved the directory structure to Gentoo standard. Dynamic files go in /var/lib/assp and static files such as images/css/etc go in /usr/share/assp/.
I'd done some sed work to get this to happen. However, once running, the webserver cannot find the CSS or images. I noticed you pass just the filename via the URL. Changing this to =/etc/passwd in your browser gives the password file as well. This is a security risk and I'd like to ask if someone knows how to restrict this to only a hard coded directory. Furthermore, how I could set this to be /usr/share/assp instead of the data directory that gets set to /var/lib/assp. Thank you for your time. Greg Watson ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
