It is important that your nsettings.cgi file, where
passwords are stored, is not visible to outsiders over the Web. Try
accessing this file in your Web browser (it is in the same directory
as your newspro.cgi). You should see an error, most often a 403 or
500 error. This is good; it means that the file isn't visible. If,
however, you see the contents of the file (various settings,
containing "``x" repeated many times), or are prompted to download a
file which, when opened, contains the contents of nsettings.cgi,
then try the steps below to make this file invisible to outsiders.
- If you didn't upload the file ".htaccess"
during install, try uploading it.
- Try CHMODding nsettings.cgi 777.
- Move the file elsewhere, preferably into a directory that
isn't visible over the Web, and give it a different name.
Edit nplib.pl, and change the "$nsettingspath"
setting right at the top of nplib.pl to point to the new
location of nsettings.cgi. |
As
well, it is possible to view some of your NewsPro configuration
options over the Web without logging in to NewsPro. Only program
settings and news items are displayed, not user or password
information. This feature is for debugging and problem-solving
purposes. If you wish, you can disable it by editing newspro.cgi and
changing the $DebugFeatures settings at the top of the file.
|