Include Files 2003-12-03 - By Duncan
Back So how does one get around this issue
ie, how do you have an include file that is not accessable by a user, do people set up a secure folder for these?
Any suggestions? - Duncan
Tim Funk wrote:
> I would think this is a security fix. (Or a bug fix) I am surprised this was > allowed in 4.0. > > -Tim > > Duncan wrote: > > > When using Tomcat 4.0, I was able to include files in a directory above > > my public web directory, but with tomcat 4.1, when I try to run the same > > jsp, I get the error: > > > > org.apache.jasper.JasperException : /main.jsp(3,0) File > > "../Private/NormalTemplate.inc" not found > > > > All casing etc is correct. > > > > Is this a security fix, or should this still be possible? > > > > -- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ------ > To unsubscribe, e-mail: tomcat-user-unsubscribe@(protected) > For additional commands, e-mail: tomcat-user-help@(protected)
-- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ------ To unsubscribe, e-mail: tomcat-user-unsubscribe@(protected) For additional commands, e-mail: tomcat-user-help@(protected)
|
|