Re: allowing users to upload
On Sat, Aug 25, 2001 at 11:30:32AM +0200, Martin F Krafft wrote:
> hi,
> i operate a couple of non-profit servers for friends to host their
> websites. there is only ssh, no ftp, but most users are mac or
> windoze, and so they have considerable difficulty uploading, even with
> the OpenSSL or other comparable scp-featuring packages. i would like
> to enable user ftp for them to facilitate, but it's too much of a
> security risk due to clear text passwords being sent over the wire. so
> i am wondering what other alternatives there are to allow users easy
> remote management of their websites, similar to ftp. or is there even
> an ssh-capable rsync client for mac and windoze, preferably, of
> course, with a GUI?
>
You could use anonymous FTP, set up properly it is quite secure.
Be especially sure that the upload directory has write but NOT read
permissions; otherwise you may find you have become a half-way
house to all sorts of unsavoury things.
This means you have to vet the uploads and move appropriate ones
to the download directory.
good luck
Cliff
Reply to: