Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
IRC over Web Server (security)
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
stingray72
n00b
n00b


Joined: 08 May 2002
Posts: 40
Location: Atlanta, GA

PostPosted: Wed Oct 23, 2002 6:50 pm    Post subject: IRC over Web Server (security) Reply with quote

Hey guys, I found a program on sourceforge (CGI:IRC) and am thinking about using it so i can access IRC from work (we're slow right now :)). My concern is the fact that anyone who could point there browser to the .cgi file could surf IRC through my web server (not that that's a huge deal). Is there anyway that I could password protect that one script? Has anyone used it and can reassure me that's it's not too dangerous

Thanks

~stingray72
Back to top
View user's profile Send private message
klieber
Bodhisattva
Bodhisattva


Joined: 17 Apr 2002
Posts: 3657
Location: San Francisco, CA

PostPosted: Wed Oct 23, 2002 7:44 pm    Post subject: Reply with quote

Just slap an .htaccess file in the directory and be done with it. There's about a billion tutorials on creating .htaccess files, so give google a try and you should be good to go.

--kurt
_________________
The problem with political jokes is that they get elected
Back to top
View user's profile Send private message
scheuri
n00b
n00b


Joined: 21 Aug 2002
Posts: 22
Location: region basel, switzerland

PostPosted: Thu Oct 24, 2002 6:58 am    Post subject: Reply with quote

aye....htaccess and you will be fine...you can even make the whole thing more interesting/complicated by adding a database instead of a plaintext-file (htpasswd)....makes it maybe easier to administrate.

and you may even make the connection to your server over SSL...:)...

oh my...there is a lot you can do to increase security...:)

my 2 rappen
scheuri
Back to top
View user's profile Send private message
stingray72
n00b
n00b


Joined: 08 May 2002
Posts: 40
Location: Atlanta, GA

PostPosted: Thu Oct 24, 2002 12:38 pm    Post subject: Reply with quote

I've used htaccess before but I thought it protected a directory?? Am I wrong? This is just one file in the cgi-bin that I want to limit access too

I'll be reading more docs on .htaccess in the mean while

Thanks guys
Back to top
View user's profile Send private message
klieber
Bodhisattva
Bodhisattva


Joined: 17 Apr 2002
Posts: 3657
Location: San Francisco, CA

PostPosted: Thu Oct 24, 2002 12:49 pm    Post subject: Reply with quote

stingray72 wrote:
I've used htaccess before but I thought it protected a directory?? Am I wrong? This is just one file in the cgi-bin that I want to limit access too

Then set up a separate cgi-bin directory for that specific script and place an .htaccess file in that dir. (Or look at AddHandler, which will let you define how .cgi files should be executed outside of the cgi-bin directory)

--kurt
_________________
The problem with political jokes is that they get elected
Back to top
View user's profile Send private message
Messiah
Tux's lil' helper
Tux's lil' helper


Joined: 30 Apr 2002
Posts: 139

PostPosted: Thu Oct 24, 2002 7:01 pm    Post subject: Reply with quote

You are wrong. You can say in your .htaccess:
Code:

<Files your.cgi>
AuthUserFile /your/.htaccess/file
AuthName       Protected
AuthType Basic
require valid-user
</Files>


And you will be fine.

Or:
Code:

<Files your.cgi>
order deny,allow
deny from all
allow 127.0.0.1
</Files>
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum