Re: [cobalt-users] protecting text files in my cg-bin directory from prying eyes

[jens@xxxxxxxxxxxxxxxxxxxx (Jens Kristian Søgaard)]

"Brian Baggett/Santa Teresa/IBM" <bbaggett@xxxxxxxxxx> writes:

> guess the file name.  For example, I have several log and data files
> written to by my cgi-bin scripts that live in my cgi-bin directory.  Some
> 
> What is the easiest way to fix this security hole?

Create a cgi-data directory somewhere not in your document-root (for
example /home/sites/siteXX/cgi-data/) and move all your sensitive
datafiles there.

Another possibility is, to use .htaccess files to deny download of
specific files (or extensions). However the solution I described first
is the best.

-- 
Jens Kristian Søgaard, Mermaid Consulting I/S,
jens@xxxxxxxxxxxxxxxxxxxx,
http://www.mermaidconsulting.com/