[Xitami] Security
Andreas Zieritz
xitami@lists.xitami.org
Thu, 01 Nov 2001 09:27:21 +0100
I'm having some troubles getting Xitami 'watertight'.
There is a little thing I have found out. Xitami is returning 2
different errors when trying to get files from areas where the user
shouldn't have access to.
When the file exists, it returns:
403 forbidden
When it doesn't exist, it returns:
404 not found
It would be better if it just returned '403 forbidden', else I could
write a program to find out which files there are on the server.
--
Servus,
Andreas
------------------------
Andreas Zieritz
Siviling. Svein Sovik AS
Fantoftveien 42
N-5072 Bergen
http://www.sovik.no