[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] How to preven http://someuser.com/admin



<flash22@xxxxxxx> wrote:
> On Tue, 10 Apr 2001 nobody@xxxxxxxxxxxxxxxx wrote:
> > How I notice that on any of the users virtual sites that if you enter
> > http://theerdomain.com/admin  it asks for the admin site user and pass
> > eg any site on the server behaves like this not just the main one
> > can you prevent this I noticed thsi when a user made a directory called
admin and of course it did not work
> >
> > I looked through the httpd.conf can't se a mod
>  redirect in there ( on a RAQ2 any way )
>  on a raq3 I did see some stuff that looked a bit like it
>
> On the Raq2 it's a server wide rewrite , look in srm.conf
>
> Other 'magic' names, /siteadmin,/personal,/.cobalt, /cgi-bin/.cobalt
> /icons , /cobalt-images/, /error/,/cgiwrapDir/
> You might be able to rewrite it in the vhost sections before the alias
> gets applied, never tried it tho...easier to just think up a new directory
> name ;)

Yes, you can comment out the line(s) from srm.conf and add them to
individual virtual hosts in httpd.conf.  Or in srm.conf you can rename the
/admin/ alias to something else.  This has the added benefit of making it
harder for visitors to get into the GUI since they won't be able to find it.
:-)

--
Steve Werby
President, Befriend Internet Services LLC
http://www.befriend.com/