Re: protecting web directories in apache2

2012-11-28 Thread Tony Baldwin 
On Tue, Nov 27, 2012 at 10:24:09PM +0530, Kushal Kumaran wrote:
 Zachary Uram net...@gmail.com writes:
 
  Running Apache2 on Debian testing release. Say I have a directory
  http://www.website.org/files/
  And I want to let a user download a file:
  http://www.website.org/files/example.txt
  But I don't want them to be able to browse the directory and see the
  other files in there.
  So how can I protect the directory?
 
 
 Turn off the Indexes option for the directory.  See documentation for
 the Options directive.

For that matter, you can make an index.html 
that doesn't list anything in there.

./tony
-- 
http://www.tonybaldwin.me
all tony, all the time!
3F330C6E


signature.asc
Description: Digital signature

protecting web directories in apache2

2012-11-27 Thread Zachary Uram 
Running Apache2 on Debian testing release. Say I have a directory
http://www.website.org/files/
And I want to let a user download a file:
http://www.website.org/files/example.txt
But I don't want them to be able to browse the directory and see the
other files in there.
So how can I protect the directory?

Zach

-- 
http://www.fidei.org


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/capu6uvccocj_e0v26fztgv996vuqi4qkhgs3prddx-qfyzq...@mail.gmail.com

Re: protecting web directories in apache2

2012-11-27 Thread François TOURDE 
Le 15671ième jour après Epoch,
Zachary Uram écrivait:

 Running Apache2 on Debian testing release. Say I have a directory
 http://www.website.org/files/
 And I want to let a user download a file:
 http://www.website.org/files/example.txt
 But I don't want them to be able to browse the directory and see the
 other files in there.
 So how can I protect the directory?

Maybe you can use Linux File System rights:

  chmod a=x files

and give the complete path to the user. Not sure Apache will accept, but
on a non-readable dir, you can access files if the dir is 'x'
(i.e. traversal)

Not tested.

HTH


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/87txsbovxb@tourde.org

Re: protecting web directories in apache2

2012-11-27 Thread Sylvain Berfini 

Hi,

A .htaccess seems to be the solution for your problem.

Regards.

Sylvain Berfini
Software Engineer at Belledonne Communications
Le 27/11/2012 16:54, Zachary Uram a écrit :

Running Apache2 on Debian testing release. Say I have a directory
http://www.website.org/files/
And I want to let a user download a file:
http://www.website.org/files/example.txt
But I don't want them to be able to browse the directory and see the
other files in there.
So how can I protect the directory?

Zach




--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/50b4e88d.9050...@belledonne-communications.com

Re: protecting web directories in apache2

2012-11-27 Thread Kushal Kumaran 
Zachary Uram net...@gmail.com writes:

 Running Apache2 on Debian testing release. Say I have a directory
 http://www.website.org/files/
 And I want to let a user download a file:
 http://www.website.org/files/example.txt
 But I don't want them to be able to browse the directory and see the
 other files in there.
 So how can I protect the directory?


Turn off the Indexes option for the directory.  See documentation for
the Options directive.

-- 
regards,
kushal


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/50b4f037.e8c4440a.47b6.8...@mx.google.com

Re: protecting web directories in apache2

2012-11-27 Thread Robert Pommrich 

Am 27.11.2012 17:25, schrieb François TOURDE:

Le 15671ième jour après Epoch,
Zachary Uram écrivait:


Running Apache2 on Debian testing release. Say I have a directory
http://www.website.org/files/
And I want to let a user download a file:
http://www.website.org/files/example.txt
But I don't want them to be able to browse the directory and see the
other files in there.
So how can I protect the directory?




Just remove Indexes from the Options block in your conf file.


Maybe you can use Linux File System rights:


No.



Not tested.



Obviously.



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/50b4eccf.4060...@gmx.de