Gossamer Forum
Home : Products : Links 2.0 : Discussions :

Making links the homepage is a security issue

Quote Reply
Making links the homepage is a security issue
I have been wondering if giving
777 access to the root directoty
for using the links home page
will become a security hole,
any ideas?
Quote Reply
Re: Making links the homepage is a security issue In reply to
What I recommend is keeping Links in a subdirectory (say /pages) and if using Apache add:

DirectoryIndex index.html index.htm /pages/index.html

to a .htaccess file and put that in your root directory. Then when someone goes to www.yoursite.com the server will look for index.html then index.htm and if it doesn't find it will pull up /pages/index.html, the Links home page. It will be completely transparent to the user, and keep you from making your home dir world-writeable.

Hope this helps,

Alex
Quote Reply
Re: Making links the homepage is a security issue In reply to
What I did was use
ln -s to make synbolic links
do you think it is equivalent?

Alejandro
Quote Reply
Re: Making links the homepage is a security issue In reply to
Yes, that should work just as well. Hadn't thought of it though. =)

Cheers,

Alex