Re: SQL Access Problem

From: Marc Ende (me@nowhere-operations.net)
Date: 10/25/01 

Message-ID: <200110250021390420.0035B1F3@smtp.puretec.de>
Date: Thu, 25 Oct 2001 00:21:39 +0200
From: "Marc Ende" <me@nowhere-operations.net>
To: focus-linux@securityfocus.com
Subject: Re: SQL Access Problem

*********** REPLY SEPARATOR ***********

On 23.10.01 at 18:13 jaywhy wrote:

>Since I wrote the original message, I figured out a few things that can be
>done to get around the problem. None are really that great.
>
>1. Run suExec. [...]
>
>2. Run proprietary web server. [...]
>
>3. Run two Apache's. [...]

Okay, I think there is another way of life.. :)

a) Jail all users in chrooted ftp environments.
b) No shell access (except in chrooted environments)
c) Name the file with the an cryptic name (agjshgajdh.inc) and use it for
the account data

Quantcast