From owner-freebsd-isp Mon Jan 18 11:39:26 1999 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id LAA26253 for freebsd-isp-outgoing; Mon, 18 Jan 1999 11:39:26 -0800 (PST) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from mimas.eclipse.net.uk (mimas.eclipse.net.uk [195.188.32.17]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id LAA26247 for ; Mon, 18 Jan 1999 11:39:24 -0800 (PST) (envelope-from stuart@eclipse.net.uk) Received: from eclipse.net.uk (mimas.eclipse.net.uk [195.188.32.17]) by mimas.eclipse.net.uk (8.9.1/8.9.1) with ESMTP id TAA25015; Mon, 18 Jan 1999 19:38:50 GMT Message-ID: <36A38DC9.BA711465@eclipse.net.uk> Date: Mon, 18 Jan 1999 19:38:49 +0000 From: Stuart Henderson Organization: Eclipse Networking X-Mailer: Mozilla 4.05 [en] (X11; I; Linux 2.0.35 i686) MIME-Version: 1.0 To: Graeme Tait CC: Karl Pielorz , lists@gal.netlab.sk, freebsd-isp@FreeBSD.ORG Subject: Re: Need non-case sensitive fs References: <001c01be42b5$f433c5a0$231da8c3@gericom-tps.tps.sk> <36A30646.B5C623EB@eclipse.net.uk> <36A31491.9875B056@tdx.co.uk> <36A3206C.BAC24C09@eclipse.net.uk> <36A33253.106C@echidna.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > If mod_speling additionally allows a single spelling > error while accommodating case variations, or even worse, > returns a list of close matches, it is a potential > security risk (in that it helps give access to URL's > that otherwise would have to be guessed exactly). true, so edit mod_speling.c and in the spdist() function do a little commenting out to leave yourself with only the bits that return SP_MISCAPITALIZED and SP_VERYDIFFERENT :-) Stuart To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message