RE: secure way for users webpage uploads

["Joaquin Ferrero" <explorer@pucela.net>]

I use proftpd with mysql users auth:

/etc/proftpd.conf:
--------------------------------------------------
<Directory /*>
  AllowOverwrite                on
  HideNoAccess
  HideUser      root
  HideGroup  root
  <LIMIT READ>
        IgnoreHidden on
  </LIMIT>
</Directory>

DefaultRoot ~/public_html users,!www

MySQLInfo localhost webuser epf83hjr http_auth
SQLUserTable mysql_auth
SQLUsernameField username
SQLPasswordField passwd
SQLEncryptedPasswords on
--------------------------------------------------

The most important:

DefaultRoot ~/public_html users,!www

permit users (group users) view yours public_html, and no more.
And administrators (group www) can view others dirs.


    Joaquin Ferrero
    explorer@pucela.net


> -----Mensaje original-----
> De: John F. Davis [mailto:davis@skink.net]
> Enviado el: lunes, 17 de julio de 2000 16:55
> Para: debian isp mailing list
> Asunto: secure way for users webpage uploads
>
>
> Hello
>
> What is the most secure way for users to update their webpages?
>
> Currently, I only allow scp and not ftp.  However, scp doesn't allow users to delete
> old files.
>
> John
>
>
> --
> To UNSUBSCRIBE, email to debian-isp-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>