Re: Validate user on FreeBSD
by Steven Taschuk other posts by this author
Mar 21 2003 2:52AM messages near this date
Re: Validate user on FreeBSD
|
Re: [php-france] Form ?
Quoth Dan Nyanko:
> What I have working so far is the client can send a file across the
> link to the server, and it is written into the directory that the
> server program resides in. I would like to add an authentication step
> that would send it to the valid users home directory, e.g.
> /home/cp_ru/filename.tar.gz
Can't the client just specify a filename of "/home/cp_ru/filename"?
That seems to do more or less what you want, but it points out a
gaping security hole in the server; the client could specify a
filename of, say, "/etc/passwd", which would be bad. (I assume
the server is running as root so it can bind to port 510.)
Why not just use ftp or sftp?
--
Steven Taschuk w_w
staschuk@[...].net ,-= U
1 1
--
http://mail.python.org/mailman/listinfo/python-list
Thread:
Dan Nyanko
Dan Nyanko
Steven Taschuk
Steven Taschuk
|