WebApp Sec mailing list archives

RE: htaccess with apache


From: "Maxim Kostioukov" <maxim () francoudi com>
Date: Tue, 4 Nov 2003 18:01:14 +0200

Dear Hans,

From: Hans Mueller [mailto:mr_chief () gmx de]
How is it possible to read the files secured with mod_access
with a cgi script?

depends on your mod_access configuration. Check the web logs to see what the guy has exactly done
(assuming that he is telling true about the way by which he got the files). Try to follow his steps, perhaps
you will find out where the security breaks.


Current thread: