Analog: Security warning
Do not use the form interface supplied with versions 2.91 or 3.0 of analog. There
is a security hole which could theoretically allow anyone using the form to ask
your server for any file on the system.
A well-configured server would not be able to read any really sensitive files,
but you probably still don't want outside people reading all the files that
the server can read, even if they're available to inside users.
Versions 3.1 and later do not have this bug.
My apologies for any inconvenience caused.
Go to the analog home page.
Need help with analog? Use the
analog-help mailing list.
Stephen Turner
Page last modified: 08-Oct-01