[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] remove slash



On Sat, 26 Jan 2002, William J.A. Brillinger wrote:

> At 03:51 PM 26/01/02 +0000, you wrote:
> > > Date: Sat, 26 Jan 2002 11:14:30 +0000
> > > From: Revd leonard payne <vicarage@xxxxxxxxxxxxxx>
> >
> > > All Eddys other suggestions seem downright dangerous to any
> > > blue washing machine owner. I use symlinks -  so comeone eddy
> > > ... elaborate .. and let the discussion roll
> >
> >Symlinks can also be downright dangerous.  I hate to post "how to
> >crack in a nutshell" messages, but all of this is easily
> >available elsewhere...  I guess I'll elaborate:
> >
> >To use symlinks, FollowSymLinks must be on.  If this directive is
> >applied to users' directories, they may use symlinks to bypass
> >path checking.
> 
> correct me if I'm wrong here but no telnet (or shell) access means a user 
> cannot create a sym-link right?

PUT create-symlink.cgi  

Never assume you can't do a telnet thing just because you don't have
telnet ;P

gsh