Re: Apache document root too well hidden

by "Chris Walker" <dev(at)rockfordweb.com>

 Date:  Tue, 1 Aug 2000 00:22:33 -0500
 To:  <hwg-servers(at)hwg.org>
 References:  pair
  todo: View Thread, Original
How do you log in via FTP? perhaps the web server redirects to whatever
account you use to log in?  (ie, /home/userisme/html)

BTW, even though its outdated in Apache, the srm.conf as well as access.conf
is still read by the server for backwords compatibility - see if there's
anything in there, the guy who set it up may have an old set of conf files
he uses over and over again

----- Original Message -----
From: Kevin A. Jackson <kevin(at)nvision.on.ca>
To: Lyle <Lyle(at)lcrcomputer.com>
Cc: <hwg-servers(at)hwg.org>
Sent: Saturday, July 29, 2000 11:09 PM
Subject: RE: Apache document root too well hidden


> At 07:38 PM 7/28/00 -0500, you wrote:
> >Let's see here.  Ping to ftp.domain.com and ping to www.domain.com come
back
> >with the same IP address??
> --
>
> Hi Lyle,
> Tried this, came back with the same IP address for both pings.
>
> --
> >By default the Apache conf file is /etc/httpd/conf/httpd.conf unless you
are
> >running RedHat's secure server and then it's /etc/httpd/conf/httpsd.conf.
> >The default start of a website under Apache is index.html and is at
> >/home/httpd/home unless the httpsd.conf or httpd.conf points you to
> >somewhere else.  BTW, if it was changed to a file beginning with a
> >.<period>, that becomes a hidden file and you need to use a utility that
> >will show you hidden files.  WSFTPPro will show hidden files.
> --
>
> I checked the conf files in these locations, and they point to document
> root directories that do not contain the website, even when I do a list
> showing all hidden files (ls -a)
>
> --
> >'nobody' has to have read access to all web files and has to have 'change
> >into' access to all directories and has to have 'execute' access to all
cgi
> >files, so they have to be somewhere!
> --
>
> I know, this is what is driving me crazy! When I do "find / -name" at the
> command line, I get one directory that I am not allowed access to, even as
> root:  /proc/5/fd, I assume this is related to the OS, but is it possible
> that something is hidden in there?
>
> Only fishy thing is a file called ".index.html.swp" in the
> "/home/httpd/html" directory, which I can't make sense out of.
>
> --
> >Just a wild thought here, what if the home directory was in a hidden
> >directory???
> --
>
> Can directories be hidden from the command "ls -a"?
>
> Thanks for your ideas,
> Cheers
>
> Kevin Jackson
>
> --
> Biz-Zone Internet Group
> We build web stuff for business
> http://www.biz-zone.com/ - Mailto:kevin(at)biz-zone.com
> Phone: (905)888-0002 - Fax: (905)888-0001
>

HWG: hwg-servers mailing list archives, maintained by Webmasters @ IWA