Re: Multi-User Security on *nix using mod_rewrite

This WebDNA talk-list message is from

2002

It keeps the original formatting. numero = 41721
interpreted = N
texte = No .. The handler has to be part of the httpd.conf file ..This is useful for us because we can host normal html sites and webcat onone server .. We use webcat and we don�t need to worry about people adding[redirect] for [search] or any other webcat code in their sites ..I'm not sure you could limit webcat to directories with Apache as WebCathappens independent of Apache .. And as such does not follow it's rules ..In webcat you could have [include file=*/directory/directory/file.txt] andApache is none the wiser where it came from ..The easiest way I can think to limit webcat is to have a rules database thatwebcat looks at .. Ie ..URL LIMITSWww.domain.com /Library/WebServer/WebSites/www.domain.com/*Allows that url to access only that directory ..Add this to the admin section and let webcat handle the security internally.. Then it will work on all web servers ..Alain> Is it possible to add the handler in ANY other way, ala htaccess or> something. I don't really know that much about Apache, but this seems like> it could be VERY useful indeed.> > > On 7/18/02 3:28 PM, Alain Russell mashed the following keys :> >> Why not just remove the webcatalog handler from the main httpd,conf file and>> add to each virtual host as needed ..>> >> We do this .. Mean sone site can map- .html to webcatalog and the next can>> be standard static Apache files ..>> >> As follows:>> >> >> ServerName www.blackpepper.co.nz>> >> Options -Indexes FollowSymLinks IncludesNoExec>> >> DocumentRoot /Library/WebServer/WebSites/www.blackpepper.co.nz>> TransferLog /var/log/httpd/www.blackpepper.co.nz_access-log>> ErrorLog /var/log/httpd/www.blackpepper.co.nz_error-log>> ServerAlias www 210.55.24.6 localhost 127.0.0.1 blackpepper.co.nz>> AddHandler webcatalog2-handler .html>> NameVirtualHost 210.55.24.6>> >> >> Alain>> >>> After reading through the docs on mod_rewrite I believe that it>>> could be used to secure, on a directory or host basis, the usage of>>> the WebDNA Engine based on file extension. This could be a great>>> way to provide standard hosting on the same machine as WebDNA if it>>> really could be made to work. I haven't yet started in on it>>> because I wanted to know if anyone has already tried it. If so,>>> does it work. If not, why not. It seems, as it runs off of>>> regular expression, that explicit denial of any registered>>> extension processed by WebDNA could be rewritten to an error page>>> or the like and that this denial could be either file path based or>>> host header based or both.>>> >>> Any mod_rewrite gurus out there that want to comment?>>> >>> Mike>>> >>> >>> ------------------------------------------------------------->>> This message is sent to you because you are subscribed to>>> the mailing list .>>> To unsubscribe, E-mail to: >>> To switch to the DIGEST mode, E-mail to>>> >>> Web Archive of this list is at: http://search.smithmicro.com/>> >> >> ------------------------------------------------------------->> This message is sent to you because you are subscribed to>> the mailing list .>> To unsubscribe, E-mail to: >> To switch to the DIGEST mode, E-mail to>> >> Web Archive of this list is at: http://search.smithmicro.com/> > > -------------------------------------------------------------> This message is sent to you because you are subscribed to> the mailing list .> To unsubscribe, E-mail to: > To switch to the DIGEST mode, E-mail to> > Web Archive of this list is at: http://search.smithmicro.com/-------------------------------------------------------------This message is sent to you because you are subscribed to the mailing list .To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://search.smithmicro.com/ Associated Messages, from the most recent to the oldest:

Re: Multi-User Security on *nix using mod_rewrite (Alain Russell 2002)
Re: Multi-User Security on *nix using mod_rewrite (Aaron Lynch 2002)
Re: Multi-User Security on *nix using mod_rewrite (Aaron Lynch 2002)
Re: Multi-User Security on *nix using mod_rewrite (Clement Ross 2002)
Re: Multi-User Security on *nix using mod_rewrite (Alain Russell 2002)
Multi-User Security on *nix using mod_rewrite (Michael Davis 2002)

No .. The handler has to be part of the httpd.conf file ..This is useful for us because we can host normal html sites and webcat onone server .. We use webcat and we don�t need to worry about people adding[redirect] for [search] or any other webcat code in their sites ..I'm not sure you could limit webcat to directories with Apache as WebCathappens independent of Apache .. And as such does not follow it's rules ..In webcat you could have [include file=*/directory/directory/file.txt] andApache is none the wiser where it came from ..The easiest way I can think to limit webcat is to have a rules database thatwebcat looks at .. Ie ..URL LIMITSWww.domain.com /Library/WebServer/WebSites/www.domain.com/*Allows that url to access only that directory ..Add this to the admin section and let webcat handle the security internally.. Then it will work on all web servers ..Alain> Is it possible to add the handler in ANY other way, ala htaccess or> something. I don't really know that much about Apache, but this seems like> it could be VERY useful indeed.> > > On 7/18/02 3:28 PM, Alain Russell mashed the following keys :> >> Why not just remove the webcatalog handler from the main httpd,conf file and>> add to each virtual host as needed ..>> >> We do this .. Mean sone site can map- .html to webcatalog and the next can>> be standard static Apache files ..>> >> As follows:>> >> >> ServerName www.blackpepper.co.nz>> >> Options -Indexes FollowSymLinks IncludesNoExec>> >> DocumentRoot /Library/WebServer/WebSites/www.blackpepper.co.nz>> TransferLog /var/log/httpd/www.blackpepper.co.nz_access-log>> ErrorLog /var/log/httpd/www.blackpepper.co.nz_error-log>> ServerAlias www 210.55.24.6 localhost 127.0.0.1 blackpepper.co.nz>> AddHandler webcatalog2-handler .html>> NameVirtualHost 210.55.24.6>> >> >> Alain>> >>> After reading through the docs on mod_rewrite I believe that it>>> could be used to secure, on a directory or host basis, the usage of>>> the WebDNA Engine based on file extension. This could be a great>>> way to provide standard hosting on the same machine as WebDNA if it>>> really could be made to work. I haven't yet started in on it>>> because I wanted to know if anyone has already tried it. If so,>>> does it work. If not, why not. It seems, as it runs off of>>> regular expression, that explicit denial of any registered>>> extension processed by WebDNA could be rewritten to an error page>>> or the like and that this denial could be either file path based or>>> host header based or both.>>> >>> Any mod_rewrite gurus out there that want to comment?>>> >>> Mike>>> >>> >>> ------------------------------------------------------------->>> This message is sent to you because you are subscribed to>>> the mailing list .>>> To unsubscribe, E-mail to: >>> To switch to the DIGEST mode, E-mail to>>> >>> Web Archive of this list is at: http://search.smithmicro.com/>> >> >> ------------------------------------------------------------->> This message is sent to you because you are subscribed to>> the mailing list .>> To unsubscribe, E-mail to: >> To switch to the DIGEST mode, E-mail to>> >> Web Archive of this list is at: http://search.smithmicro.com/> > > -------------------------------------------------------------> This message is sent to you because you are subscribed to> the mailing list .> To unsubscribe, E-mail to: > To switch to the DIGEST mode, E-mail to> > Web Archive of this list is at: http://search.smithmicro.com/-------------------------------------------------------------This message is sent to you because you are subscribed to the mailing list .To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://search.smithmicro.com/ Alain Russell

DOWNLOAD WEBDNA NOW!

Re: Multi-User Security on *nix using mod_rewrite

2002

Top Articles:

Related Readings: