[Xitami] Security

Andreas Zieritz xitami@lists.xitami.org
Thu, 01 Nov 2001 09:27:21 +0100


I'm having some troubles getting Xitami 'watertight'.

There is a little thing I have found out. Xitami is returning 2
different errors when trying to get files from areas where the user
shouldn't have access to.

When the file exists, it returns:
    403 forbidden

When it doesn't exist, it returns:
    404 not found

It would be better if it just returned '403 forbidden', else I could
write a program to find out which files there are on the server.

--
Servus,
 Andreas

------------------------
Andreas Zieritz
Siviling. Svein Sovik AS
Fantoftveien 42
N-5072 Bergen
http://www.sovik.no