how can one safetly upload web pages securely

hi....
I'm working on a school assignment that requries me to do some research...

I would like to know how can a customer safetly upload web pages securely to my server if I am providing web hosting services to customers??

How can i maintain the confidentiality and integrity of the customers' web pages??


hope to hear from you
thanks

Hi.

Hmmmmm, one of the ways is ftp. Make a ftp user with password, and give it to them. The user then will be able to upload the site via ftp. No one else can upload since uploading would require access and only the customer you give access to, will be able to.

Other is a file upload script, in php, perl, or anything you like, with the page password protected.

No, ftp is SO not secure for uploading. Not only are the passwords passed in PLAINtext on most systems, a number of ftp servers have developed big security holes in the software itself in the past (wuftpd, ws_ftp, and others). That's such wrong advice.

You would need to use something like SCP. It's a way of using SSH to connect to your server via ftp. You could also use a tunnelling ssh connection forwarded to your ftp port (same diff). Homesite 5 has scp built into it (40 bit), so if you needed it, you could set if up in many cases. I would expect it to be in other Macromedia products soon.

You could also use an SSL based browser based solution. Any decent hosting company can set this up for you. In fact, many half-decent ones already have it (we do).

Have at, but don't think that FTP is "Secure". Port 23 (ftp) is commonly monitored by kiddies looking for passwords, and is a major security hole.

Take care.

Jon Dillon
=-=-=-=-
http://www.ServeSite.net
http://www.OurBox.com

How can you give shell access to customers and feel secure, and give ftp and feel in-secure?

That is your opinion, so that is good. Maybe it works fine with your customers, in which case I value your opinion.

With us, we get a dozen people messing ssh every week, and attempts to dangle with root access every other day, and ftp is the only way to minimize, "not" eliminate such threats.

It's a good point. We chroot our accounts all to heck, so it's almost impossible to break into root (and it wouldn't matter much anyways... hehe).

I liked your response. Very thoughtful.

what are you doing with all that survey data?

Best,

Jonathan

Hello.



It's for an upcoming research site, going to be included in a research in a series of phases, and that was the starting phase.

What about you? The survey you are doing in the other thread? An interesting topic you have there.