SV: [opencms-dev] "/opencms" prefix + security

Felix Sprick felix.sprick at netlight.se
Mon Oct 30 17:36:17 CET 2006


Thanks for the hint. Have you ever tried to hide the opencms prefix when
using Microsoft IIS? Is there anything equivalent to the mechanism that is
described for Apache Webserver?

Thanks,
Felix

-----Ursprungligt meddelande-----
Från: r_malchow at web.de [mailto:r_malchow at web.de] 
Skickat: den 18 oktober 2006 23:56
Till: The OpenCms mailing list; felix.sprick at netlight.se
Ämne: Re: [opencms-dev] "/opencms" prefix + security


hi felix,

there's a howto package called 
com.alkacon.documentation.howto-httpd-tomcat-modproxy
available for download from:

    http://www.opencms.org/opencms/en/download/documentation.html

.rm

Felix Sprick schrieb:
> Hi all,
>
>  
>
> I would like to hide the "/opencms" prefix in the URL when accessing my
> website. Right now, there are two "opencms" prefixes in the URL. I guess I
> can get rid of one of them by making opencms the default application in my
> tomcat. But what about the second one? Do you guys have any simple howto
for
> that?
>
>  
>
> Another question to all of you: the client who is going to use this
> opencms-built website requires high security in the meaning that under no
> circumstances somebody should be able to change the content without being
> authorized. Do you know any security leaks in openCMS? What are the basic
> steps to secure the openCMS environment ( apart from changing the default
> admin user)?
>
>  
>
> Cheers,
>
> Felix
>
>  
>
>  
>
>
>   
> ------------------------------------------------------------------------
>
>
> _______________________________________________
> This mail is sent to you from the opencms-dev mailing list
> To change your list options, or to unsubscribe from the list, please visit
> http://lists.opencms.org/mailman/listinfo/opencms-dev




More information about the opencms-dev mailing list