Since this was years ago, and I only have smaller clients on tango
now, I went in to double check....
I definitely do NOT have "Enable Parent Paths" enabled on IIS, and yet
this works. IIS doesn't allow, but witango does. I don't think it
would be a security hole, because iis or witango code has to pass the
urls to witango. IIS won't pass a parent url to witango, and you write
the code. I guess if you allowed someone to edit witango code, like in
a db, using metahtml or something, it could be a security hole, but
that is the only way I see it. Of course, I may be missing
something. ;-)
--
Robert Garcia
President - BigHead Technology
VP Application Development - eventpix.com
13653 West Park Dr
Magalia, Ca 95954
ph: 530.645.4040 x222 fax: 530.645.4040
[EMAIL PROTECTED] - [EMAIL PROTECTED]
http://bighead.net/ - http://eventpix.com/
On Dec 12, 2007, at 5:15 AM, [EMAIL PROTECTED] wrote:
Hi, Rob.
That's a nice approach, however, how do you justify security hole,
that
you regularly open? You must configure IIS to allow parent paths,
obviously. What would guard your system from hacker going just one
more
level up the hierarchy?
May be there's a way to map a virtual directory to every web site,
using
TCF repository?
Sincerely,
Andre Rekhtine
Sr.IS Consultant, MCSE
Moveable Online Inc.
[EMAIL PROTECTED]
You can have it out of your webroot, Thats what I do. So lets say all
your sites are in folders like this:
\\server\websites\site_a\
\\server\websites\site_b\
etc, each is its own domain, virtual site. Now the tcfs are here:
\\server\websites\tcfs\
It is not in the root of any of the sites, but all sites can access
them, just use this as your tcfsearchpath.
/../tcfs/
This will back out one level from root, and into tcfs. It works, I
have been doing this for years.
--
Robert Garcia
President - BigHead Technology
VP Application Development - eventpix.com
13653 West Park Dr
Magalia, Ca 95954
ph: 530.645.4040 x222 fax: 530.645.4040
[EMAIL PROTECTED] - [EMAIL PROTECTED]
http://bighead.net/ - http://eventpix.com/
On Dec 11, 2007, at 10:00 PM, MC Tay wrote:
Dale:
Thanks for the responses.
It doesn't seem to work with virtual directory in IIS.
In your case do you have the /nidb/compile/tcfs path physically
below your webroot?
It works if I setup the TCF path physically below my webroot, but
not as a virtual directory. Is that how it supposed to work or did I
do something wrong?
Thanks!
MC
At 05:05 AM 12/11/2007, you wrote:
The server needs to know where to look for the TCF files. This is
set
in the witango.ini file. The default (already set there) is in the
same directory, but you can add other locations as appropriate to
your
situation.
This is what's in our directory for TCFSEARCHPATH. We have left the
defaults and put our main location for TCFs *first* in the list.
Note
that the location starts at webroot
TCFSEARCHPATH=/nidb/compile/tcfs/;<@APPFILEPATH>;<@CLASSFILEPATH>;/
Witango/TCF/
Check out the Witango documentation for this and other details, esp
about setting up your server.
On Dec 10, 2007, at 10:20 PM, MC Tay wrote:
Hi:
I'm somewhat a rookie when it comes to TCF. Does TAF and TCF files
have to be in the same directory for it to work? The execution of
the TAF file fails when I put the TCF file in other directory.
Thanks!
MC
________________________________________________________________________
TO UNSUBSCRIBE: Go to http://www.witango.com/developer/
maillist.taf
-
________________________________________________________________________
TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf
________________________________________________________________________
TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf
________________________________________________________________________
TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf
________________________________________________________________________
TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf
________________________________________________________________________
TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf
