[Xitami] Folder access Probs with 2000

[Francis Turner]

Shane Smith wrote:

>I had this problem as well.  Same thing on windows XP.  I'll be d:\ is the
>drive that Xitami is installed on, right?  For some reason it can't see
>the root of the drive it's installed on.  What I did was share the drive,
>map it to a new drive letter (x:\), and set the path /d to point to the
>mapped drive x:\.  So, essentially you're still seeing drive d:\.  It
>works for me.  Hope it helps.
>
BIG BIG SECURITY HOLE HERE IF YOU AREN'T CAREFUL

Are you SURE you want to do this?

If you set aliasses like
     DDD = "d:/"
where D: is the drive that Xitami is instaleld on then you are asking 
someone to look at http://hostname/DDD/Xitami/defaults.cfg and 
http://hostname/DDD/Xitami/defaults.aut which means that you will show 
the world your configuration settings. If you've been really sloppy and 
allowed FTP to see http aliases then someone could put a trojan in place 
of your webserver by doing put ftp://hostname/DDD/Xitami/Xiwin32.exe 
trojan.exe

I don't want to be alarmist here but what Xitami is doing here is makign 
sure that you don't accidentally open up a huge security hole. This is 
GOOD and you really need to think about whether you actually want that 
hole to exist before trying to work around it!

BTW if Xitami is in C:\xitami and you share d:\ where d:\ is where you 
installed Win2k/XP thats still not the smartest thing to do since that 
allows people to see d:\winnt which has a lot of interesting information 
in it and again the potential for someone to upload a trojan exists.

Francis

-- 
"Education is when you read the fine print; 
  experience is what you get when you don't." Pete Seeger