Netscape ENTERPRISE SERVER 6.1, Manual

Page: 68 / 373

PathCheck Stage
68 Netscape Enterprise Server NSAPI Programmer’s Guide • April 2002 (Draft)
UNIX Only. The
find-links
function searches the current path for symbolic or
hard links to other directories or file systems. If any are found, an error is returned.
This function is normally used for directories that are not trusted (such as user
home directories). It prevents someone from pointing to information that should
not be made public.
Parameters
Examples
See Also
init-uhome, unix-home
find-pathinfo
Applicable in
PathCheck
-class directives.
The
find-pathinfo
function finds any extra path information after the file name in
the URL and stores it for use in the CGI environment variable PATH_INFO.
disable
is a character string of links to disable:
•
h
is hard links
•
s
is soft links
•
o
allows symbolic links from user home directories only if
the user owns the target of the link.
dir
is the directory to begin checking. If you specify an absolute
path, any request to that path and its subdirectories is checked
for symbolic links. If you specify a partial path, any request
containing that partial path is checked for symbolic links. For
example, if you use
/user/
and a request comes in for
some/user/directory
, then that directory is checked for
symbolic links.
bucket
optional, common to all
obj.conf
functions
checkFileExistence check linked file for existence and abort request with
403
(forbidden)
if this check fails.
PathCheck fn=find-links disable=sh dir=/foreign-dir
PathCheck fn=find-links disable=so dir=public_html