Changeset 26543

Timestamp:

2012-11-29T18:08:58+13:00 (11 years ago)

Author:

ak19

Message:

Forgot to commit the windows equivalent for the changes to the linux httpd.conf.in. Commit message for that: Kathy said that the apache server really only needs to give access to the collect and web folders (and cgi-bin for remote scripts), and that the rest of GS2 can just be inaccessible. This will deny access to the user databases too and the apache logs. Have now tested on a Windows GS2 server against Linux client-gli, so changes to windows' httpd.conf.in does not prevent access to usersDB.

File:

• main/trunk/greenstone2/runtime-src/packages/apache-httpd/windows-httpd.conf.in (modified) (1 diff)

main/trunk/greenstone2/runtime-src/packages/apache-httpd/windows-httpd.conf.in

@@ -514 +514 @@
   </Directory>
 
-  Alias /greenstone "**GSDLHOME**"
-  <Directory "**GSDLHOME**">
-     Options Indexes MultiViews FollowSymLinks
-     AllowOverride None
-     Order deny,allow
-     **CONNECTPERMISSION** from all
-     Allow from 127.0.0.1 **HOST_IP** **HOSTS** localhost
+  # Deny access to all except collect and web folder
+  <Directory />
+    Order Deny,Allow
+    Deny from all
   </Directory>
 
-# Deny access to users.gdb (and other gdb files)
-# Tested with remote GS2 server on Windows against linux client
-# If any issues, can try appending the line: 
-#   Allow from 127.0.0.1 **HOST_IP** **HOSTS** localhost
-  <FilesMatch "\.gdb">
-     Order deny,allow
-     Deny from all
-  </FilesMatch>
+  Alias /greenstone/web "**GSDLHOME**/web"
+  <Directory "**GSDLHOME**/web">
+    Order Deny,Allow
+    **CONNECTPERMISSION** from all
+    Allow from 127.0.0.1 **HOST_IP** **HOSTS** localhost
+  </Directory>