ggreene
10th of June 2004 (Thu), 06:56
I've installed EE1.5r4 on a W2k server. I set up ftp with all the right
paths and ran the test and it came back all ok, but when I looked in the
ftp directory I saw the path structure that I defined for the EE directory.
Which makes me think it did all of its testing using the default ftp
directory as the base directory instead of actually cd'ing to the EE dir.
Is that the way it's suppose to work or does it actually need to cd into
the EE directory? From doing further testing it doesn't look like the
W2k ftp server is allowing users to go outside of the base ftp directory.
I can set the base ftp directory to be the real EE directory but was
wondering if that would be a security problem?
Any thoughts?
Thanks.
Gregory Greene
paths and ran the test and it came back all ok, but when I looked in the
ftp directory I saw the path structure that I defined for the EE directory.
Which makes me think it did all of its testing using the default ftp
directory as the base directory instead of actually cd'ing to the EE dir.
Is that the way it's suppose to work or does it actually need to cd into
the EE directory? From doing further testing it doesn't look like the
W2k ftp server is allowing users to go outside of the base ftp directory.
I can set the base ftp directory to be the real EE directory but was
wondering if that would be a security problem?
Any thoughts?
Thanks.
Gregory Greene