RE: [WebDNA] Permissions on DB files

This WebDNA talk-list message is from

2012


It keeps the original formatting.
numero = 108112
interpreted = N
texte = --_000_6A4332EB8679B94DAB8AB56EC89B0CFF99AAE68AExchangebihrlel_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Govinda, Chris, Bill: Thanks for the help! The FilesMatch was exactly what I needed, albeit a lit= tle tweaking on the regular expression for my particular database file exte= nsion. I really appreciate your replies. All great stuff! Brian ________________________________ From: William DeVaul [wdevaul@gmail.com] Sent: Monday, January 16, 2012 6:50 PM To: talk@webdna.us Subject: Re: [WebDNA] Permissions on DB files What chris said. Govinda's suggestion only blocks those from being process= ed by WebDNA, not from being returned by the web server. This is not a per= missions issue because the web server will presumably need to access the db= s because WebCatalog is started by the user that is the same as the same we= b server. Bill On Mon, Jan 16, 2012 at 6:19 PM, > wrote: You can also add these lines in your httpd.conf (maybe it will also work fr= om an .htaccess) #----------------------- Deny from all #----------------------- - chris On Jan 16, 2012, at 21:02, Brian Wachter wrote: > Say I have a WebDNA database called "customers.db". What is the best way = to protect this file from someone just typing the path to the file in their= browser and having the raw data appear in the browser? With regard to User= , Group and Everyone permissions, I presume that the permissions on this fi= le should be "none" for "Everyone", but what should the Group permissions b= e set to so that WebDNA can access the file? > > I'm running WebDNA 6 on OS X 10.6. > > Thanks, > Brian Wachter > Stoneport LLC > --------------------------------------------------------- This message is= sent to you because you are subscribed to the mailing list . To unsubscrib= e, E-mail to: archives:http://mail.webdna.us/list/talk@webdna.us Bug Report= ing: support@webdna.us --------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list >. To unsubscribe, E-mail to: > archives: http://mail.webdna.us/list/talk@webdna.us Bug Reporting: support@webdna.us --------------------------------------------------------- This message is s= ent to you because you are subscribed to the mailing list . To unsubscribe,= E-mail to: archives: http://mail.webdna.us/list/talk@webdna.us Bug Reporti= ng: support@webdna.us --_000_6A4332EB8679B94DAB8AB56EC89B0CFF99AAE68AExchangebihrlel_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Govinda, Chris, Bill:

Thanks for the help! The FilesMatch was exactly what I needed, albeit a lit= tle tweaking on the regular expression for my particular database file exte= nsion. I really appreciate your replies. All great stuff!

Brian
From: William DeVaul [wdevaul@gmail.com]<= br> Sent: Monday, January 16, 2012 6:50 PM
To: talk@webdna.us
Subject: Re: [WebDNA] Permissions on DB files

What chris said.  Govinda's suggestion only blocks those from bei= ng processed by WebDNA, not from being returned by the web server.  Th= is is not a permissions issue because the web server will presumably need t= o access the dbs because WebCatalog is started by the user that is the same as the same web server.  

Bill

On Mon, Jan 16, 2012 at 6:19 PM, <christophe.billiottet@webdna.us> wrote:
You can also add these lines in your httpd.conf (maybe it will also work fr= om an .htaccess)


#-----------------------
<FilesMatch  ".*\.(db|inc|conf|ini)$">
Deny from all
</FilesMatch>
#-----------------------

- chris


On Jan 16, 2012, at 21:02, Brian Wachter wrote:

> Say I have a WebDNA database called "customers.db". What is = the best way to protect this file from someone just typing the path to the = file in their browser and having the raw data appear in the browser? With r= egard to User, Group and Everyone permissions, I presume that the permissions on this file should be "none" for= "Everyone", but what should the Group permissions be set to so t= hat WebDNA can access the file?
>
> I'm running WebDNA 6 on OS X 10.6.
>
> Thanks,
> Brian Wachter
> Stoneport LLC
> --------------------------------------------------------- This message= is sent to you because you are subscribed to the mailing list . To unsubsc= ribe, E-mail to: archives:http://mail.webdna.us/list/talk@webdna.us Bug Reporting: supp= ort@webdna.us

---------------------------------------------------------
This message is sent to you because you are subscribed to
the mailing list <ta= lk@webdna.us>.
To unsubscribe, E-mail to: <talk-leave@webdna.us>

--------------------------------------------------------- This message is s= ent to you because you are subscribed to the mailing list . To unsubscribe,= E-mail to: archives: http://mail.webdna.us/list/talk@webdna.us Bug Reporti= ng: support@webdna.us
--_000_6A4332EB8679B94DAB8AB56EC89B0CFF99AAE68AExchangebihrlel_-- Associated Messages, from the most recent to the oldest:

    
  1. RE: [WebDNA] Permissions on DB files (Brian Wachter 2012)
  2. Re: [WebDNA] Permissions on DB files (Govinda 2012)
  3. Re: [WebDNA] Permissions on DB files (William DeVaul 2012)
  4. Re: [WebDNA] Permissions on DB files (christophe.billiottet@webdna.us 2012)
  5. Re: [WebDNA] Permissions on DB files (Govinda 2012)
--_000_6A4332EB8679B94DAB8AB56EC89B0CFF99AAE68AExchangebihrlel_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Govinda, Chris, Bill: Thanks for the help! The FilesMatch was exactly what I needed, albeit a lit= tle tweaking on the regular expression for my particular database file exte= nsion. I really appreciate your replies. All great stuff! Brian ________________________________ From: William DeVaul [wdevaul@gmail.com] Sent: Monday, January 16, 2012 6:50 PM To: talk@webdna.us Subject: Re: [WebDNA] Permissions on DB files What chris said. Govinda's suggestion only blocks those from being process= ed by WebDNA, not from being returned by the web server. This is not a per= missions issue because the web server will presumably need to access the db= s because WebCatalog is started by the user that is the same as the same we= b server. Bill On Mon, Jan 16, 2012 at 6:19 PM, > wrote: You can also add these lines in your httpd.conf (maybe it will also work fr= om an .htaccess) #----------------------- Deny from all #----------------------- - chris On Jan 16, 2012, at 21:02, Brian Wachter wrote: > Say I have a WebDNA database called "customers.db". What is the best way = to protect this file from someone just typing the path to the file in their= browser and having the raw data appear in the browser? With regard to User= , Group and Everyone permissions, I presume that the permissions on this fi= le should be "none" for "Everyone", but what should the Group permissions b= e set to so that WebDNA can access the file? > > I'm running WebDNA 6 on OS X 10.6. > > Thanks, > Brian Wachter > Stoneport LLC > --------------------------------------------------------- This message is= sent to you because you are subscribed to the mailing list . To unsubscrib= e, E-mail to: archives:http://mail.webdna.us/list/talk@webdna.us Bug Report= ing: support@webdna.us --------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list >. To unsubscribe, E-mail to: > archives: http://mail.webdna.us/list/talk@webdna.us Bug Reporting: support@webdna.us --------------------------------------------------------- This message is s= ent to you because you are subscribed to the mailing list . To unsubscribe,= E-mail to: archives: http://mail.webdna.us/list/talk@webdna.us Bug Reporti= ng: support@webdna.us --_000_6A4332EB8679B94DAB8AB56EC89B0CFF99AAE68AExchangebihrlel_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Govinda, Chris, Bill:

Thanks for the help! The FilesMatch was exactly what I needed, albeit a lit= tle tweaking on the regular expression for my particular database file exte= nsion. I really appreciate your replies. All great stuff!

Brian
From: William DeVaul [wdevaul@gmail.com]<= br> Sent: Monday, January 16, 2012 6:50 PM
To: talk@webdna.us
Subject: Re: [WebDNA] Permissions on DB files

What chris said.  Govinda's suggestion only blocks those from bei= ng processed by WebDNA, not from being returned by the web server.  Th= is is not a permissions issue because the web server will presumably need t= o access the dbs because WebCatalog is started by the user that is the same as the same web server.  

Bill

On Mon, Jan 16, 2012 at 6:19 PM, <christophe.billiottet@webdna.us> wrote:
You can also add these lines in your httpd.conf (maybe it will also work fr= om an .htaccess)


#-----------------------
<FilesMatch  ".*\.(db|inc|conf|ini)$">
Deny from all
</FilesMatch>
#-----------------------

- chris


On Jan 16, 2012, at 21:02, Brian Wachter wrote:

> Say I have a WebDNA database called "customers.db". What is = the best way to protect this file from someone just typing the path to the = file in their browser and having the raw data appear in the browser? With r= egard to User, Group and Everyone permissions, I presume that the permissions on this file should be "none" for= "Everyone", but what should the Group permissions be set to so t= hat WebDNA can access the file?
>
> I'm running WebDNA 6 on OS X 10.6.
>
> Thanks,
> Brian Wachter
> Stoneport LLC
> --------------------------------------------------------- This message= is sent to you because you are subscribed to the mailing list . To unsubsc= ribe, E-mail to: archives:http://mail.webdna.us/list/talk@webdna.us Bug Reporting: supp= ort@webdna.us

---------------------------------------------------------
This message is sent to you because you are subscribed to
the mailing list <ta= lk@webdna.us>.
To unsubscribe, E-mail to: <talk-leave@webdna.us>

--------------------------------------------------------- This message is s= ent to you because you are subscribed to the mailing list . To unsubscribe,= E-mail to: archives: http://mail.webdna.us/list/talk@webdna.us Bug Reporti= ng: support@webdna.us
--_000_6A4332EB8679B94DAB8AB56EC89B0CFF99AAE68AExchangebihrlel_-- Brian Wachter

DOWNLOAD WEBDNA NOW!

Top Articles:

Talk List

The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...

Related Readings:

Math with Time (1997) WebDNA Grep help wanted (2004) [WebDNA] Credit card processing (2012) Oracle XE (2006) Merging databases (1997) possible, WebCat2.0 and checkboxes-restated (1997) Append..... doesn't (2000) High ASCII inside [LOOKUP] inside [LISTWORDS] (1998) Page Counters? (1997) For Sale: WebTen 2.x and WebCat 2.x (2000) problems with 2 tags shakur (1997) Price recalc based on quantity (1997) ShowNext and random sort (1998) shipping costs (1999) Passing Variables to a [shell scriptid=123][/shell] context (2004) Shared databases (2003) Authorize.Net down 2 days in row (2004) Problems appending to database (1997) Fwd: Problems with Webcatalog Plug-in (1997) Formulas.db + Users.db (1997)