On Sat, 1 Sep 2001, David J. Boccabella wrote:
> Hi folks.
> One of the things that has concerned me with the way E-Smith have their
> I-Bays set up is the fact that an I-Bay can be accessed 2 ways.
>
> 1). Via the Virtual Domain name you assigned to it and
> 2). As a sub directory off the main domain name
>
> This can cause some concern if you are hosting several sites for different
> folks.. and you don't want their info and yours to intermix.
Assuming that you don't include any links to the i-bays that reference
those i-bays in the content on the primary site, then those virtual domain
i-bays will only be accessed by someone actually typing the URL
http://domain.name/ibayname/. If you are really paranoid about this, then
make the ibayname something that is unlikely to be guessed, e.g.
eh38im7wxp78.
If you don't like that idea, then you can create a custom template which
adds a Location section which denies access to that i-bay to the virtual
domain section for the primary domain. Attempting to access that
subdirectory of the mail domain will give a 403 response.
We do recognise this inconvenience in mapping i-bays to web sites, and
intend to re-work it for version 5.1.
> I've a small PHP snippet that can help here.. This works only with HTML at
> the moment.. am looking at ways for FTP locking too
You'll find it difficult to do any ftp locking - the ftp protocol doesn't
support the concept of named virtual domains. You can bar ftp access to
the i-bays that you don't want as part of the primary domain by choosing
the appropriate settings.
Charlie Brady [EMAIL PROTECTED]
Lead Product Developer
Network Server Solutions Group http://www.e-smith.com/
Mitel Networks Corporation http://www.mitel.com/
Phone: +1 (613) 368 4376 or 564 8000 Fax: +1 (613) 564 7739
--
Please report bugs to [EMAIL PROTECTED]
Please mail [EMAIL PROTECTED] (only) to discuss security issues
Support for registered customers and partners to [EMAIL PROTECTED]
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
