[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Gnump3d-users] password-protection for special URLs
From: |
Ross Palmer Mohn |
Subject: |
Re: [Gnump3d-users] password-protection for special URLs |
Date: |
Wed, 10 Nov 2004 08:23:26 -0500 |
I suspect if you upgrade to v2.8 your security problem will be solved. I
added a patch a bit ago that fixed this. My patch makes it so that you
only need a single .password file in your music root to protect the
entire site. GNUMP3d recursively searches up the directory tree looking
for a password file. This technique works on the "special" URLs as well.
Cheers! -Ross
On Wed, 2004-11-10 at 03:23, Bernd Gauweiler wrote:
> Following-up on this.... Although my configuration meets what Ray
> describes, the only page that is in fact protected is the home page.
> All the special URLs work without password, and I can actually play
> without authentication via the most recent, or custom playlists,
> entrances, using any browser.
>
> Is the single location of the .password file really sufficient, or
> does it have to be in each subfolder for the configured root?
>
> Ray Tran wrote:
> > Bernd,
> > I have a .password file and I absolutely can't see anything without
> > authenticating first. If you can, then maybe you have the file in
> > the
> > wrong place or there is a bug in your version. FYI, my .password
> > file is in the "root" defined in gnump3d.conf and I'm running v2.8.
> >
> > Bernd Gauweiler wrote:
> > > I guess each newbie has 3 freebies, so here's my third one:
> > >
> > > How do I password-protect the special URLs, such as /prefs,
> > > /stats, etc?
> > >
> > > I guess what I am after is some global lock-out mechanism. I
> > > understand the .password file, but that still allows to see quite
> > > a lot of details, including the complete music collection (go
> > > Custom Playlists). Granted it won't play to unauthenticated users,
> > > but ideally the unauthorized visitor would see nothing at all,
> > > right?
> > >
> > > Any advice gratefully accepted,
> > > Bernd
> >
> > ATB,
> > Ray
> >
> >
> >
> > _______________________________________________
> > Gnump3d-users mailing list
> > address@hidden
> > http://lists.gnu.org/mailman/listinfo/gnump3d-users
> >
> >
>
>
> ______________________________________________________________________
> _______________________________________________
> Gnump3d-users mailing list
> address@hidden
> http://lists.gnu.org/mailman/listinfo/gnump3d-users
--
Ross Mohn
address@hidden