[Xitami] Folder access Probs with 2000

[Jesse Foster]

Thanks for the advice Francis, but I don't need to
worry about the security hole.  The only reason I have
it accessing the main hard drive like that is so that
I can get any file from my system while I am at home. 
That alias is IP restricted and user/pass restricted
too, so I doubt anynore but me is going to get in.
Jesse
--- Francis Turner <francis.turner@freesbee.fr> wrote:
> Shane Smith wrote:
> 
> >I had this problem as well.  Same thing on windows
> XP.  I'll be d:\ is the
> >drive that Xitami is installed on, right?  For some
> reason it can't see
> >the root of the drive it's installed on.  What I
> did was share the drive,
> >map it to a new drive letter (x:\), and set the
> path /d to point to the
> >mapped drive x:\.  So, essentially you're still
> seeing drive d:\.  It
> >works for me.  Hope it helps.
> >
> BIG BIG SECURITY HOLE HERE IF YOU AREN'T CAREFUL
> 
> Are you SURE you want to do this?
> 
> If you set aliasses like
>      DDD = "d:/"
> where D: is the drive that Xitami is instaleld on
> then you are asking 
> someone to look at
> http://hostname/DDD/Xitami/defaults.cfg and 
> http://hostname/DDD/Xitami/defaults.aut which means
> that you will show 
> the world your configuration settings. If you've
> been really sloppy and 
> allowed FTP to see http aliases then someone could
> put a trojan in place 
> of your webserver by doing put
> ftp://hostname/DDD/Xitami/Xiwin32.exe 
> trojan.exe
> 
> I don't want to be alarmist here but what Xitami is
> doing here is makign 
> sure that you don't accidentally open up a huge
> security hole. This is 
> GOOD and you really need to think about whether you
> actually want that 
> hole to exist before trying to work around it!
> 
> BTW if Xitami is in C:\xitami and you share d:\
> where d:\ is where you 
> installed Win2k/XP thats still not the smartest
> thing to do since that 
> allows people to see d:\winnt which has a lot of
> interesting information 
> in it and again the potential for someone to upload
> a trojan exists.
> 
> Francis
> 
> -- 
> "Education is when you read the fine print; 
>   experience is what you get when you don't." Pete
> Seeger 
> 
> 
> 
> 
> --
> Xitami Users Mailing List -- For Xitami support
> To unsubscribe:
http://lists.xitami.org/mailman/listinfo/xitami


__________________________________________________
Do You Yahoo!?
Yahoo! GeoCities - quick and easy web site hosting, just $8.95/month.
http://geocities.yahoo.com/ps/info1