Re: [htdig] Question on the security issue for htdig3.1.5

[Gilles D. <gr...@sc...>]

According to Sandeep Hulsandra:
> Also, when I make an http request like this,
> http://xxx.yyy.zzz/cgi-bin/htsearch?-c/var/search_engine/htdig/search-mysite
> /conf/,
> it does not seem to be reading from my configuration file
> (/var/search_engine/htdig/search-mysite/conf/htdig.conf), as it gives me an
> error saying "Unable to read word database file
> '/var/search_engine/htdig/search-mysite/db/db.words.db' Did you run
> htmerge?". My database directory is set in the configuartion file to be
> '/var/search_engine/htdig/search-mysite/db_dir/' where all the database
> files reside.
> 
> When I run the htsearch as an http request without the -c option, it takes
> the correct configuration file and does everything perfectly.
> 
> Am I testing the security problem on my site in the wrong way?

The -c option specifies a configuration file, not a directory for config
files, so you need to give the whole path to your config file, including
the final "htdig.conf" component.

-- 
Gilles R. Detillieux              E-mail: <gr...@sc...>
Spinal Cord Research Centre       WWW:    http://www.scrc.umanitoba.ca/~grdetil
Dept. Physiology, U. of Manitoba  Phone:  (204)789-3766
Winnipeg, MB  R3E 3J7  (Canada)   Fax:    (204)789-3930