Firstly I have got to say that Fileman is the single-most useful script I have ever installed - I use a free server where you only have to pay for the domain name and get unlimited space but I have always been restricted by having to use a local dial-up number to FTP to the site even though I am on broadband. This program is excellent and works a treat through the broadband connection. Thank you for a superb product.

Having installed the system I found that I had to install two copies to cope with my server provider's file layouts (CGI-SHL for cgi and HTDOCS for public pages) - not a problem as I just then set up two calls in my on-line admin section to access cgi or public. I did try to install with the root directory one up from CGI and HTDOCs but their server won't allow me to change the permissions of that directory.

My main question is that having set up the root is it possible for a user to go up a level from the root. On my site domain I host a few subdomains for local clubs which are at a level such as http://www.mysite.com/theirsite. Up until now I have had to make all the changes because of the security issues involved in giving access via FTP which has to go through my pages first. Am I right in saying therefore that if I set up Fileman with a root of http://www.mysite.com/theirsite it would only allow them to access their pages and not be able to go up a level into my pages?

My main reasoning behind this is that through Fileman their appears no way to be able to go backwards beyond the root and also if I try to change directory through the top address bar in Fileman - nothing I put in their (path or url) is seen to be a valid address by Fileman.

Many thanks

Alan

I find that odd, you should be able to at least see your files in the root directory if you can't edit them. Do you know if your server has suEXEC (or another type of cgi wrapper) installed?


That should work. I did something similar to this on a friends website and it works great.


You might want to remove the command option from their template set. Something else you might want to think about: a malicious perl script can read and modify files that it has permission to. So it's possible that they can write a script to modify files above their fileman root dir.

Regards,
Charlie