phpgroupware-cvs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Phpgroupware-cvs] CVS: filemanager/doc INSTALL,1.1,1.2 README,1.1,1.2


From: Jason Wies <address@hidden>
Subject: [Phpgroupware-cvs] CVS: filemanager/doc INSTALL,1.1,1.2 README,1.1,1.2
Date: Sat, 21 Sep 2002 01:26:46 -0400

Update of /cvsroot/phpgroupware/filemanager/doc
In directory subversions:/tmp/cvs-serv17953/doc

Modified Files:
        INSTALL README 
Log Message:
Updates needed for phpwebhosting -> filemanager name change, some quotes fixes 
and some other misc. cleanup

Index: INSTALL
===================================================================
RCS file: /cvsroot/phpgroupware/filemanager/doc/INSTALL,v
retrieving revision 1.1
retrieving revision 1.2
diff -C2 -r1.1 -r1.2
*** INSTALL     25 Feb 2002 04:58:47 -0000      1.1
--- INSTALL     21 Sep 2002 05:26:43 -0000      1.2
***************
*** 34,38 ****
  SECURITY CONCERNS
  -----------------
! There are many security concerns related with allowing users to store files 
on the server.  The most common problem is that users can upload any type of 
file, including CGI and PHP scripts.  This in effect grants them local access 
to the machine, and can be used to read database passwords and other sensitive 
files.  The ability to upload files of any type is not forbidden by 
phpwebhosting because it is sometimes desired, and also the types of vulnerable 
files differ from server to server.  To combat this, you can add a simple entry 
to Apache's httpd.conf to prevent certain types of files from being executed.  
Included below is an example that results in .cgi, .pl, .php, .php3, and .phps 
files being treated as normal text files.  It also explicitly turns all Options 
off, which includes turning Indexes (listing of files) off.
  
  <Directory /path/to/files>
--- 34,38 ----
  SECURITY CONCERNS
  -----------------
! There are many security concerns related with allowing users to store files 
on the server.  The most common problem is that users can upload any type of 
file, including CGI and PHP scripts.  This in effect grants them local access 
to the machine, and can be used to read database passwords and other sensitive 
files.  The ability to upload files of any type is not forbidden by filemanager 
because it is sometimes desired, and also the types of vulnerable files differ 
from server to server.  To combat this, you can add a simple entry to Apache's 
httpd.conf to prevent certain types of files from being executed.  Included 
below is an example that results in .cgi, .pl, .php, .php3, and .phps files 
being treated as normal text files.  It also explicitly turns all Options off, 
which includes turning Indexes (listing of files) off.
  
  <Directory /path/to/files>

Index: README
===================================================================
RCS file: /cvsroot/phpgroupware/filemanager/doc/README,v
retrieving revision 1.1
retrieving revision 1.2
diff -C2 -r1.1 -r1.2
*** README      25 Feb 2002 04:58:47 -0000      1.1
--- README      21 Sep 2002 05:26:43 -0000      1.2
***************
*** 1,3 ****
! Module: phpwebhosting
  Author: Jason Wies <address@hidden>
  Comments to: address@hidden, address@hidden
--- 1,3 ----
! Module: filemanager (formerly phpwebhosting)
  Author: Jason Wies <address@hidden>
  Comments to: address@hidden, address@hidden
***************
*** 6,14 ****
  NOTES
  -----
! phpwebhosting replaces filemanger.  phpwebhosting should be used instead of 
filemanager in all new installs.
! 
! phpwebhosting will be renamed after 0.9.14, at least in time for 0.9.16, but 
perhaps much sooner.  Most likely it will be renamed to 'filemanager', and the 
current 'filemanager' removed completely.
! 
! phpwebhosting started as an independent (non-phpGroupWare) project, and there 
continues to be a separate stand-alone distribution available at 
http://phpwebhosting.sourceforge.net.  This is also the origin of the name, as 
the code was originally (and still can be) used for public webhosting.
  
  For installation help, see the INSTALL file in this directory.
--- 6,10 ----
  NOTES
  -----
! filemanager started as an independent (non-phpGroupWare) project named 
phpwebhosting, and there continues to be a separate stand-alone distribution 
available at http://phpwebhosting.sourceforge.net/.
  
  For installation help, see the INSTALL file in this directory.
***************
*** 16,20 ****
  DEV NOTES
  ---------
! index.php is depreciated by the inc/class.xxphpwebhosting.inc.php files.  
index.php is still used in the 0.9.14 release, but all future changes should be 
made to the inc/class.xxphpwebhosting.inc.php files (3-tiered).  This includes 
using templates.
  
  See the docs in phpgwapi/doc/vfs for more information on interacting with the 
VFS (Virtual File System).
--- 12,24 ----
  DEV NOTES
  ---------
! index.php is depreciated by the inc/class.xxfilemanager.inc.php files.  
index.php is still used in the 0.9.14 release, but all future changes should be 
made to the inc/class.xxfilemanager.inc.php files (3-tiered).  This includes 
using templates.
  
  See the docs in phpgwapi/doc/vfs for more information on interacting with the 
VFS (Virtual File System).
+ 
+ OLD NOTES
+ ---------
+ phpwebhosting replaces filemanger.  phpwebhosting should be used instead of 
filemanager in all new installs.
+ 
+ phpwebhosting will be renamed after 0.9.14, at least in time for 0.9.16, but 
perhaps much sooner.  Most likely it will be renamed to 'filemanager', and the 
current 'filemanager' removed completely.
+ 
+ UPDATE: The above renaming has occurred, the module formerly known as 
'phpwebhosting' is now 'filemanager', the default file manager for 
phpGroupWare.  Any references to phpwebhosting should be replaced in favor of 
filemanger.





reply via email to

[Prev in Thread] Current Thread [Next in Thread]