darran
Jan 20 2007, 02:35 PM
| | I am a noob when it comes to hosting stuff. I want to protect my files I have hosted, but I am not sure how to go about doing this. I want to host all my J2ME source code in that particular directory but at the same time, I do not want people to simply access the page and then take the file as they please. I have seen this kind of security measure when you type a certain directory folder e.g. http://www.darran.trap17.com/myown/ he would not be able to get a file listing directory but instead, an error message. Can someone guide me on how to achieve this? |
Reply
QuickSilva
Jan 20 2007, 03:11 PM
Right ok, You can either: 1. Have a password popupTo do this: In cPanel click "Web Protect", then select the folder. At the top it will have a check box and an input. Tick the check box and in the input put what you want it like it to say then click "Save". Next at the bottom, where it says "Add New User" there are two inputs. Put what you want your username to be and in the other the password. Then click "Add New User". To test what you have just done, open up the folder in a web browser and a password popup should come up. 2. ForbiddenRight this isn't as good, as I believe people can access your files if they type the full URL to the file in. But just the folder and it will show up "403 Forbidden" error. To do this: In cPanel click "Index Manager". Click the directory you wish to protect and then on the next page click "No Indexes". That will protect the directory. Go to it in a web browser to validate that it works. -Tom
Reply
jlhaslip
Jan 20 2007, 03:54 PM
Your Cpanel has the capability for you to set / define Custom error pages. Check that out. Also, check the security re-driects available by using the .htaccess file.
Reply
BuffaloHELP
Jan 20 2007, 07:49 PM
You can also use CHMOD value of 700 to prevent even further. By preventing other than yourself to read those files/directory you can be sure that no one can even get a glimps of the file. But if you want to execute these files as part of scripts (like you mentioned) webprotect will not work. htaccess and robots would be the best way so that people and search engines won't even know your files exist in the first place. For each j2me souce file, perhaps you can place a session id where if your single souce file is called, it redirects to another page thereby not revealing the original page. As far as I can tell J2ME is still the client side JAVA thus anyone can download the file and view its source. The only way to really prevent your scripts from being "seen" is to run it server side, i.e. PHP. PHP code cannot be seen at 95% of the time.
Reply
darran
Jan 21 2007, 12:09 AM
Thanks guys for the suggestions, I have implemented the webprotect, a password to access the folder and also the indexing of files is off, so people cannot download it, but just to make sure. Can you test the folder? http://www.darran.trap17.com/darran
Reply
jlhaslip
Jan 21 2007, 01:40 AM
It asks for a user name and password (which I didn't have) and then displays the 404 error page. Looks secure enough.
Reply
darran
Jan 21 2007, 06:06 AM
Then it should be secure from the looks of things? They not only need a password to access the directory but also even if they do, they can't view the contents, the only way they can get the files are through FTP access. Is there anyway ANYONE could break through the security I have implemented though?
Reply
QuickSilva
Jan 21 2007, 11:33 AM
Not that I know of really. If they do gain access to the .htpasswd file (think that is the filename) the password is encrypted anyway, and I think cPanel auto makes this forbidden aswell, so they have no look that way. The only way really is brute forcing the username and password to get in, and even if it was the best protected in the world, and somebody bruteforced the username and password they could get in (within reason). I don't think there is any bruteforce protection scripts out there.
Reply
darran
Jan 23 2007, 02:59 AM
I remembered the way to stop bruteforce, would be to disable any login attempts if the user fails to type in the right password in 3 attempts. I do not know whether this is implemented in CPanel though or is this a feature we would have to implement ourselves?
Reply
Similar Topics
Keywords : protecting directory deliberate access- Official: Can't Access My Cpanel - Supports From Admins
- (69)
Scroll down to Post #8 for Admin Support Ok I've read stuff here and there in the support
forum and shoutbox about the recent trap17 server problem. I'm extremely confused. Some people
say that their websites are working fine. Some people are experiencing different issues from mine,
had their website reset or something. I can access my website on the gamma server, so I assume that
if I unpark and park my domain again, I can get it to work like the last time. I accessed my cpanel
at bishoujo.trap17.com/cpanel because the 'Access CPanel' link on the fo...
No Site Access
- (4)
Almost There, However.... [resolved]
- Cannot access webmail yet. (7)
After all the troubles over the past week, I have everything set up, my access to MySQL databases
restored, however, I cannot access my webmail yet. I log in on the screen before you get the choice
which webmail to use (Squirrel, Horde or Roundcube), and when clicking on Horde I get "Login failed
because your username or password are incorrect", with Squirrel mail i get; "ERROR: Connection
dropped by IMAP server." and Roundcube (probably as the name implies) keeps going round in circles.
According to the opening screen of cpanel, I have 3 email accounts (as it should be)...
Can't Access My Site An Cpanel
- already did some sugested things (4)
I still can't get to my website and cpanel, Tings I did: requested xisto to unblock my ip
cleaned my cache/cookies Did this with both IE and FF When I am @ my dads house he can acces my
website. So I guess it is still an ip problem. I did read some posts but couldn't find a
solution. Thx in advance,...
Can't Access My Site....weird Issue
- (5)
Okay, so last night everything worked fine. I loaded up cpanel, fixed issues with the site after the
database move, etc. Today I'm unable to load up the site. It just keeps giving me ping
timeouts. With what I'm being told by others it is only me having this issue with my site, and
yet there have been 0 changes to my pc between it working and not. I have tried multiple times
during the day with no luck. Along with this, if I load my website using a proxy service then I do
not have any issues. The only time it will not allow me to access it is if I am "using" my...
How Do I Find My Mysql Password? [resolved]
- Cannot access my MySQL (5)
After all the recent problems, my account has been restored. I have setup my parked domain agin, and
that works fine. However, I can no longer access my MySQL databases (I can from PHPMyAdmin, but
that's all). I had to create a new user for my databases, and created the user with exactly the
same username and password I had before, but some of my web pages do not let me access the pages I
have associated with my databases. Where could i find out what my DB password is? (Although I am as
good as sure I am using the right one). I have tried my old password, the new c...
Remote Access Mysql
- (8)
Is it possible to directly access my local database from my website? For example, if somebody
submits info on my website, the info they submitted would be transferred to my local database
directly. Is that possible? And if so, how do I set that up? The reason I don't want to upload
my database to my subdomain is because it would be difficult to keep the website database and my
local database in sync . . . or is there a way to do that? Thanks for any replies....
I Cant Access The Server!
- (1)
i can not establish a connection AT ALL!! my ftp program (Core FTP LE) cannot connect,
neither can my online ftp..... also, i cannot log in to my cpanel!! in short, i
cant do ANYTHING!!! can anyone help me?? better question, is the server down? and im
not aware of it? /mad.gif" style="vertical-align:middle" emoid=":angry:" border="0" alt="mad.gif"
/>...
Is It Possible To Access The Mysql Remotely?
- (10)
I like to experiment with a lot of things and I was thinking of making a sort of instant messenger
in Python, but I want to let people have actual accounts so I need to be able to access the mySQL
remotely. If that's not possible, are we allowed to run Python scripts on the server?...
Unable To Replace .png File In Directory
- Can't even delete it using Cpanel (7)
I can't delete a little file using file manager in Cpanel. I'm trying to delete a .png
image, actually, I'm trying to replace it. The response comes back as a success, but when I
reload my site it's still there. Then I go back to the file manager and go up a level, then back
and WOOP! There it is! I'm beyond frustrated here. What is going on?...
Anonymous Ftp Access?
- (2)
Hi, my subdomain here is tf2maps.trap17.com, and I was wondering, how do you enable anonymous ftp
access for the public_ftp folder? I cant seem to find the option in Cpanel. And every time I try to
access http://tf2maps.trap17.com/public_ftp/tf/ it gives me a 404 error? Is there any way of
seeing my folders in the browser? Thank you! /biggrin.gif" style="vertical-align:middle"
emoid=":D" border="0" alt="biggrin.gif" />...
Server Issues? Web Site Down? Cpanel Access?
- Server Migration issues to report. (48)
I tried downloading my email from website this morning and Thunderbird said it couldn't access
it the server. Then I tried loading my website - to no avail. Does anyone have any idea what's
going on? Is anyone else experiencing this? Seems like this is the second time this spring this has
happened. Is an upgrade going on, or something? Thanks in advance for your help! ...
Sub Domain Problem : Urgent
- Cannot access my sub domains (10)
Hi, I am having some serious problems with my sub domains. I registered a site with trap17 named
http://zoebelkin.co.cc . Then I made 2 sub domains for the site. One is for the forums section
and the other is for the gallery section. 1> forums.zoebelkin.co.cc 2> gallery.zoebelkin.co.cc
Whenever I type these in the browser adress bar the browser gives an output that it cannot find the
web sites. But they are complete and should show something. Also using www. in front of the sub
domains didn't help. Is www. needed in front of the sub domains. Could you just...
Cannot Access Cpanel...
- (3)
hey guys, its starting to irritate me how my computer is somewhat dumb...I don't know if its
something I did or what, but maybe somebody can help. I go to my cpanel, from any link I try it says
internet explorer cannot find page or whatever the heck it says...but wait....i go to my
laptop...and what happens? perfect, however i hate my laptop to death cuz it does not have nearly
anything and im not supposed to use it for anything but work, and its connection SUCKS...so ya, does
anybody think they know how to fix it? im trying to download firefox and or opera right no...
Unable To Access Cpanel
- (6)
I'm not able to access the cPanel for my hosting account, I get the following error, CODE
The connection has timed out The server is taking too long to respond. I tried accessing the
cPanel from http://gamma.xisto.com/cpanel ...
Problems With Ftp Access
- (1)
Well topic title says its all I have problem with ftp access to my account here on trap17 so if
anyone has experienced similar issues lately. The problem is when I try to log on it disconnects me
from the server. I am using filezilla however I have tried to access trough file manager and it
works fine though it is not the same protocol. I must admit I have deleted some folders recently
however I am quite certain that it is all connected to the joomla installation and not some system
files but if there is some specified folder for ftp could you plese write down so I cou...
I Cannot Access My Site. [resolved]
- Am I blocked by Firewall? (13)
Hi, is there a server problem? All of a sudden I cannot get through to
http://www.vlaanderen-flanders.org.uk anymore, nor can I FTP. Could someone check this out,
please?...
Directory Restricted?
- I can't edit one of my site's directories (7)
My website is split into two directories: "site", which is my main site's content, and "forum",
which explains itself. The "site" directory is mostly filled with Joomla! files due to my
website using the Joomla! CMS. Previously, I was able to upload templates and extensions to
Joomla! without fail. However, since today whenever I've done either of these I just get
"failed" messages. Unable to source it to a problem with Joomla, I tried to access the directories
using FTP. I was able to access and rename all my directories using FTP, but whenever I t...
Where Do I Upload My Ftp Files? [resolved]
- As in, which directory? (1)
I recently got approved for hosting. I have an account right now, but I don't know which
directory to post my FTP stuff in. (I don't know if this is in support or not; the search
results didn't return anything.) I remember with my last host that had CPanel that you had to
upload it into the "public_html" folder. So I do that, or do I just upload it into the root
directory? Thanks in advance! (EDIT: Oh, never mind, it is /public_html.)...
Alternative Access While Tranferring Domain
- (3)
Hello! I can't start my site because I'm waiting for the domain to be tranferred, well
to cahnge the nameservers. I just want to know if it's possible to access my site (in a temporal
way) by IP or something, also this might help to prevent ppl to see the site 'cause it's a
surprise. So plz help me! THANKS!...
Unable To Access My Site
- Inability to access my website from certain network (6)
I have a problem... My site works ok, and there is no problem with that, BUT... I am unable to
access my site, my cPanel, and even gamma.xisto.com, from my workplace... I have conntacted my
ISP's tech support, and they checked everything, and all is fine... But I still can't access
gamma server... We have a static IP address, so perhaps our IP was banned /blink.gif"
style="vertical-align:middle" emoid=":blink:" border="0" alt="blink.gif" /> ? Who can I contact to
see what's going on? This is becoming frustrating, because I want to put up some files and db, ...
Changes In Phpmyadmin
- Access to my database from program not working anymore. (0)
I was wondering if something has changed in the MySQL or PHPMyAdmin section of Trap 17. (Hope I am
explaining this correctly). I run a newsletter system on my website and the details of the people
who subscribed are in a MySQL database. To get those data from the database and to send the
newsletter to all subscribers I use a program called "Qios Pelican". Up to now it always worked
perfectly, but now it cannot seem to retrieve data anymore, yet I have not changed anything to my
setup. I use the MySQL OLEDB Provider driver to connect, and in case it helps, here are the ...
Can't Access Cpanel
- Or anyone else's for that matter (4)
After I got hacked I had the wonderful job of getting my password back. I did get my password back,
however there is a problem. I was only able to get into my cPanel once with the password and my
computer crashed (I hate Linux for the browser shutting down randomly), before I could change it.
I understand the hacker could have easily changed it. What concerns me however is that I cannot
get into anyone else's cPanel on Trap17 either, from any of the computers on my home network.
I am guessing that Xisto blocked my IP address for so many failed login attemp...
Can't Access My Email Account [resolved]
- (3)
I couldn't access my email account for 3 days ago .. I use the Horde .. the problem is when I
click on Login the page loads itself and don't change!!!!......
Can't Access My Url After Domain Change
- (3)
I just got a domain, and switched it over to trap17. I did this last night, and I know it takes a
while for the dns to get configured. But, I cannot access my site from the old URL and the new URL
is giving me this error QUOTE The requested URL could not be found on this
server!!! what shall I do?...
Can't Access Phpmyadmin
- (2)
I can't access Phpmyadmin. I get this mesage: No input file specified. Also my forums gets loads
of database errors. Can anyone help me?...
Mysql Access Error[resolved]
- (5)
The MySQL server is Down, please look into this soon. I'm with Trap17 for nearly an year but
never faced any issues witht the free hosting so far, but his is the first time I'm facing this.
Please kindly look into this....
Password Problems
- Please Help I can't access my CP (5)
I have entered my password, I have reset my password and entered the new one and it still won't
let me onto my control panel, the login box just sits there. Staring at me. I know the password I
entered was right as it was working fine yesterday and the day before. I changed my domain name
before the password problem. Thanks...
Cpanel Access for a sub-domain?
- (7)
i have a sub-domain and ftp account set up for someone, but is there any way to give them cpanel
access? for instance so they can create their own mysql databases, change their own passwords, etc?...
Account Created But Can't Access Cpanel
- I read the rules but couldn't find answer (10)
My hosting is aproved and i got e-mail from xisto company but i can't login to cpanel Can anyone
in forum help me or do i send mail to xisto?...
Looking for Protecting, A, Directory, From, Deliberate, Access
|
|
Searching Video's for Protecting, A, Directory, From, Deliberate, Access
|
advertisement
|
|