Hi dev group,

   The use of HTTP authentication (.htaccess + .htpasswd) requires php to
be run as an apache module rather than as cgi.  This prohibits the use of
suexec to run the php.  Paranoid sysadmins could use suexec to run the php
as the boinc user, leave a tight umask, tighten permissions on the files,
and in general be less than trusting ;-)

Has there been any consideration of doing the authentication with php
itself rather than .htaccess?
_______________________________________________
boinc_dev mailing list
[email protected]
http://lists.ssl.berkeley.edu/mailman/listinfo/boinc_dev
To unsubscribe, visit the above URL and
(near bottom of page) enter your email address.

Reply via email to