[mod_python] publisher security concerns

Javier Quinteros jquinte at fadu.uba.ar
Mon Apr 8 18:15:08 EST 2002


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Don't be worried about Python standard modules. The only things that anyone 
can execute via URL is the scripts you have in the Directory defined in 
apache. This means that all the third-party modules can be placed in 
/usr/local/python2/lib (or whatever) with Python standard modules and will 
not be exposed via apache.

Bye,

On Monday 08 April 2002 17:34, Allan Saddi wrote:
> Hi Javier,
>
> That was very helpful, and yes, it does actually sound like the
> "right" solution. :) The only drawback is that any third-party
> modules (that is, modules that you didn't write yourself) will
> have to be modified similarly. This may or may not be an easy
> task, depending on the number of such modules you use in your
> project. (And what about Python standard modules?)

- -- 
- ---------------------------------
Javier Quinteros
jquinte at fadu.uba.ar
Secretaría de Planificación
Universidad de Buenos Aires
- ---------------------------------
Existe un solo lugar donde el Norte y el Sur del mundo se enfrentan en
igualdad de condiciones: es una cancha de fútbol de Brasil, en la 
desembocadura
del río Amazonas. La línea del ecuador corta por la mitad el estadio Zerao, en
Amapá, de modo que cada equipo juega un tiempo en el sur y otro tiempo en el
norte.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8sghddBzRnlFl4cgRAi6AAJ9imwImXJLSSgT0r5/ZACI5pFzEUwCeOtRO
i94azxuFCdMoI1YMJ56qB6o=
=lQ1c
-----END PGP SIGNATURE-----



More information about the Mod_python mailing list