| nospam@geniegate.com 2005-09-27, 3:31 am |
| In: <1127787724.486426.245700@g49g2000cwa.googlegroups.com>, "lakeview" <g@gerstman.com> wrote:
>Is there some way to access someone's website directory to get a list
>of the files in the website server? Or is a password always needed?
Can you provide us with a bit of context?
There is only one rule to applying a security model based on an outsider
gaining access to your file list. - DON'T.
An index.html placed so as to prevent file listings for security purposes is
kind of foolish. Nice to have one to keep your kid sister out, but thats about
it. (It is good to use one in *combination* to other things though, mostly to
remove the temptation)
If, on the other hand you really are trying to obtain access to another
companies list of files, no, you don't need a password.
Email them with a message, something like this:
Dear Such-And-Such,
I would like to obtain a list of all files on your web server. Please
send a list to the following address <insert your email address here>
Or, if this arrangement is unsatisfactory, please provide for me, a
url where I might download such a list.
Thank you.
<Insert your name here>
Passwords are almost never required to send an email such as the above
to someone. You do need an email address though. You might want to include
a reason for your request, as this is a fairly obscure request.
Jamie
--
http://www.geniegate.com Custom web programming
guhzo_42@lnubb.pbz (rot13) User Management Solutions
|