Re: Wouldn't this be a security risk??

2002-08-28 Thread Tim Funk
Have apache deny the request. Very simple change to httpd.conf. For example: # No one in my WEB-INF directory AllowOverride none deny from all # No one look at my properties files Order allow,deny Deny from all Satisfy All # No one look at my website app config # OK - This i

Wouldn't this be a security risk??

2002-08-28 Thread Chad Kellerman
Hello everyone, I have been running tomcat for a while and just started to notice a few things. First, let me say I have it configure on a linux server with mod_webapp, with Tomcat version 4.0.3. Let's say I have a war file application called hello.war that I call like so: http://m