|
courtney ludwin
courtneyludwin at yahoo.com
Tue Jan 10 09:21:30 EST 2006
Good call on the "Deny from all" I keep the python src
in it's own directory structure away from htdocs. I
have had issues in the past w/ "SetHandler none"
before, I remember it not working that well.
The reason that I set up the url map was so that my
python code could live in it's own directory
structure, one that makes sense from a package
perspective not necessarily a url perspective.
e.g.:
conf/
urlmap.config
htdocs/
css/
images/
js/
somefile.html
src/
somecoolap/
common/
appspecific1/
appspecific2/
Courtney
--- Graham Dumpleton <grahamd at dscpl.com.au> wrote:
>
> On 10/01/2006, at 8:14 PM, Graham Dumpleton wrote:
>
> >
> > On 10/01/2006, at 5:52 PM, courtney ludwin wrote:
> >
> >> <FilesMatch "(^[^\.]*$|^[^\?]*[\?]+[^$]+$)">
> >> SetHandler python-program
> >> PythonHandler common.dispatch.dispatcher
> >> PythonDebug On
> >> </FilesMatch>
> >
> > SetHandler python-program
> > PythonHandler common.dispatch.dispatcher
> > PythonDebug On
> >
> > <Files *.*>
> > SetHandler None
> > </Files>
>
> BTW, I should point out that both of these
> techniques are actually
> dangerous to use if you keep your Python code for
> your handler in
> the same directory. That is because your .py and
> .pyc files are
> accessible for people to download. Always a good
> idea to also use:
>
> <Files "*.py">
> deny from all
> </Files>
> <Files "*.pyc">
> deny from all
> </Files>
>
> Or similar obscure regular expression which catches
> both at the
> same time.
>
> Graham
>
>
__________________________________________
Yahoo! DSL Something to write home about.
Just $16.99/mo. or less.
dsl.yahoo.com
|