[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-users] cgiwrap unsecure?
- Subject: [cobalt-users] cgiwrap unsecure?
- From: Mike Vanecek <nospam99@xxxxxxxxxxxx>
- Date: Mon Nov 5 17:35:32 2001
- Organization: anonymous
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
I have been searched and read tons of doco, but cannot find any problems with what I have. Still it seems that cgiwrap overrides htaccess. E.g.,
This url triggers htaccess authentication:
http://<domain>/robo/info/who.pl
This url does not trigger htaccess authentication:
http://<domain>/cgiwrapDir/cgiwrap/robo/info/who.pl
The Qube2 htaccess file in the robo/info directory is
AddType text/x-server-parsed-html .html .shtml
AuthUserFile /home/groups/home/robo/info/.htpasswd
AuthGroupFile /dev/null
AuthName "Robo Members"
AuthType Basic
<Limit GET PUT POST>
require valid-user
</Limit>
If I understand what I am seeing ???? then it would seem that the use of cgiwrap is not providing security, but has removed it??
Mike.