hi friends, i am using the Squid cache server's cache manager utility (cachemgr.cgi) to watch the Squid's performance and statistics. the screen presented by cachemgr.cgi has 4 fields to be filled in - the host, the port, the manager name and the password. all is fine if i give values for all the 4 fields - but if i do not specify a manager name i get an 'access denied' error.
this is ok, but the strange part is that i just have to give in some value (any string or even a character) in the manager name field - no specific value - to get access. it is just that the field has to be filled. i found it strange and did RTFM - but to no avail. could anyone please tell me whether it is a feature/behaviour of the cachemgr.cgi program ? sorry if this is an FAQ. i have found from securityfocus.com that it is possible to access web server data by changing the port value specified and that it is a security concern too. thanks in advance, Hareesh. ------------------------------------------------------- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 _______________________________________________ linux-india-help mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/linux-india-help
