RE: [cobalt-users] protecting text files in my cg-bin directory from prying eyes

["Dan Kriwitsky" <dan@xxxxxxxxxxxxx>]

> I have searched the archives and found lots of posts on directory browsing
> and how to disable it.  I have a more specific question.  I have added
> index.html files to all my directories to keep people from being able to
> get directory listings via there web browsers.  However, they can still
> view any non-executable files via their browser if they happen to know or
> guess the file name.  For example, I have several log and data files
> written to by my cgi-bin scripts that live in my cgi-bin directory.  Some
> of these files contain sensitive information and I do not want 
> people to be
> able to read the files via their browsers.
> 
> What is the easiest way to fix this security hole?
> 
Move the logs to /home/sites/site#/new_dir
Since they're "above" the web directory, they can't be browsed.

-- 
Dan Kriwitsky