Home
Name Modified Size InfoDownloads / Week
wsfasu.tar.bz2 2016-01-26 31.7 kB
README 2016-01-25 2.0 kB
Totals: 2 Items   33.7 kB 0
For usage of the functions contained in the ahtstdf.h file,
simply remove the leading "ht" from the function name, and
search for it's manual page. This system only has directory
level file permissions. When using htstat, the file
permissions are taken from the directory. A regular file
with the execute permission set cannot be executed on the
server host.

Modify the STATIC variable in the Makefile to suit your
needs before running make.

make install needs to have the environment variable
"DOMAIN_NAME" set. It will install into
"$HOME/public_html/$DOMAIN_NAME"

It will ask for a password. I recommend using a random or
psudorandomly generated 32 charactor password featuring only
ASCII characters.

When first installed root and nobody are the only users. The
site is initially locked for root access only.

To remove authentication requirements for a directory, make
it owned by the nobody group, then make it readable and
executable by the owning group and by others as S_IRGRP, S_IXGRP,
S_IROTH, and S_IXOTH.

/pcgi-bin does not require authentication to access, the
xhtml form interfaces in /pbin use programs in /pcgi-bin.
/cgi-bin requires authentication to access, and the xhtml
form interfaces in /bin use programs in /cgi-bin.

The security policy of most browsers do not allow a form to
be submitted to a different domain, or to a POST path which
does not even have a domain (such as without
authentication). Many browsers do not attempt to
authenticate when submitting a form which was downloaded
without a domain to a POST path which requires auth.

If any of the CGI programs are run without authentication, it
runs with the effective user id of the nobody user.

This has been tested and works on Apache 2.2 on FreeBSD
10.2, and 8.4. It was initially designed to be compatible
with Apache 1.3 on RHEL 5, but the system I had access to
had a typo in it's md5.h header, making further testing and
developement not cost effective with my time at the time.
There is no reason it shouldn't work on such a set-up,
however.
Source: README, updated 2016-01-25