Re: [cobalt-users] CGI Question

[Brent Sims <brent@xxxxxxxxxxx>]

On Fri, 19 May 2000, alonsog@xxxxxxxxxxxxx so wrote:

} A cgi script I'm trying to install tells me to create a *NON-WEB* directory
} (located outside the server's web root) for security purposes. I know I
} can create a directory before the /web folder in mydomain.com but how can I
} access that folder via a browser to be able to use the .pl file? is this
} possible, or what do they mean?

	More often then not requirements such as this are intended
to increase the security of the application by storing critical data
- such as user names, passwords, credit card numbers, etc - in a
directory which can not be accessed via the Internet. The contents
of that directory, however, would be accessible to scripts that have
permission to access the directory. Thus, for example, downloading a
password file via the end users browser becomes all but impossible
but that password file is readily accessible to the application that
uses it.

	Peace be with you,
	
	Brent
	
	Brent Sims
	WebOkay Internet Services
	http://www.WebOkay.net
	Brent@xxxxxxxxxxx
	(719) 595-1427 (Voice/Fax)