[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] Re: Re: Re: Re: SSI Vuln on cobalt



Chris Adams wrote:

However, like I said, I really do think this is a moot point, because I
think that anything you can put in one .htaccess file can be overriden
by a .htaccess file in a subdirectory.  You could play a never-ending
game of tag trying to follow a users' subdirectory creation.

Don't forget the human factor. If you find someone doing nasty things you can try everything on a technicla level to stop him - or simply block him :-)

As a SysAdmin it is my task to make sure my users follow the defined and agreed terms of use. If they don't - they get a warning and as a final resort they get closed out.

A very simple solution that has proved to work :-)

my .02 only

Jan Wildeboer