CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 934
Comments: 25
block bottom
spacer spacer

Securing Folders on a Server

 
Post new topic   Reply to topic       All -> FavForums -> General Site [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
JK119

Sergeant
Sergeant


Joined: Mar 01, 2005
Posts: 125
Location: USA

PostPosted: Fri Sep 07, 2007 6:43 pm    Post subject: Securing Folders on a Server
Reply with quote

Hi all,

I host my website w/ godaddy and the thing is.. I have a clients folder and subdirectories under it.. but if i send a client an ftp link for them to d/l a file the link always has a link that says "go to upper level" allowing that client to view all the other files w/o a uname and password... so my question is.. is there anyway to secure my folders so the client can only view whats in their folder? godaddy does have a thing where u can add a uname and pw to a folder but its your only allowed up to 6 of them... that sucks.. so anyone know of some software or some sort of solution for this?

Back to top
View users profile Send private message Send email Visit posters website
PCBruiser

SRT Team Lead
SRT Team Lead
Forums Admin

Joined: May 11, 2005
Posts: 11723

1st Responder Mentors 1st Responders Forums Admin MIRT Moderators Premium Rootkit Experts Security Experts SRT Team CC Committee

PostPosted: Fri Sep 07, 2007 6:49 pm    Post subject:
Reply with quote

I have two quick and easy suggestions. Either encrypt the files or zip them. In either case, assign the client a decryption key or zip password. In those circumstances, who cares if someone else downloads the files, they can't access or use them for anything.


_________________
Don't read? Can't learn!
Back to top
View users profile Send private message
JK119

Sergeant
Sergeant


Joined: Mar 01, 2005
Posts: 125
Location: USA

PostPosted: Fri Sep 07, 2007 7:40 pm    Post subject:
Reply with quote

thankyou much sir


_________________
kade
Back to top
View users profile Send private message Send email Visit posters website
JK119

Sergeant
Sergeant


Joined: Mar 01, 2005
Posts: 125
Location: USA

PostPosted: Fri Sep 07, 2007 7:48 pm    Post subject:
Reply with quote

do they make any specific software for anything ilke this?


_________________
kade
Back to top
View users profile Send private message Send email Visit posters website
PCBruiser

SRT Team Lead
SRT Team Lead
Forums Admin

Joined: May 11, 2005
Posts: 11723

1st Responder Mentors 1st Responders Forums Admin MIRT Moderators Premium Rootkit Experts Security Experts SRT Team CC Committee

PostPosted: Fri Sep 07, 2007 8:22 pm    Post subject:
Reply with quote

I assumed in my earlier post that these are document files that they can download via http (or FTP) and then they can view them offline. You can also do this with html files/folders, and they can download the zip (that would be the best method for html), unzip them and then view the pages off line in their browsers.

Any good zip utility - paid like WinZip or WinRAR (my favorite), or free ones like 7Zip, etc. will handle a zip password for the zipped content. And, you need not use the same program to zip and unzip the content, the use of passwords is standardized.

If you go the encrypted route, which is not convenient or recommended for html or multifile "documents", say a PowerPoint presentation with Excel spreadsheets embedded/linked in the ppt, then there are a bunch of them that are also free or pay. TrueCrypt is an excellent free one, and ScrambleOnClick (pay but inexpensive, one of the excellent package of very useful OnClick utilities) is an excellent paid one. In the case of encryption software, I would suggest using the same software on both sides, since the implementation of encryption algorithms may be slightly different, and fail if you use different software on both sides.

A great site to browse for freeware and shareware that is completely clean and malware free is Snapfiles:

http://www.snapfiles.com

you can find almost anything there. Either method will work with any kind of file. However for multifile or html, which is more structured than a txt or pdf file say, zipping is by far the best and easiest route, since you can preserve the structure of multiple files and folders within the document within a single zip file. Unzip the archive and the structure comes right back.


_________________
Don't read? Can't learn!
Back to top
View users profile Send private message
JK119

Sergeant
Sergeant


Joined: Mar 01, 2005
Posts: 125
Location: USA

PostPosted: Fri Sep 07, 2007 8:31 pm    Post subject:
Reply with quote

ok and is this the o nly route? what if i dont want the other client to even view the other files.. so then we would be back at step 1 again.. u know any software that manages my folders and all directories online to secure them?


_________________
kade
Back to top
View users profile Send private message Send email Visit posters website
PCBruiser

SRT Team Lead
SRT Team Lead
Forums Admin

Joined: May 11, 2005
Posts: 11723

1st Responder Mentors 1st Responders Forums Admin MIRT Moderators Premium Rootkit Experts Security Experts SRT Team CC Committee

PostPosted: Fri Sep 07, 2007 8:34 pm    Post subject:
Reply with quote

No sorry I don't, but others here might well know of some that fits that requirement. You might google for a javascript that might do what you are looking for.


_________________
Don't read? Can't learn!
Back to top
View users profile Send private message
JK119

Sergeant
Sergeant


Joined: Mar 01, 2005
Posts: 125
Location: USA

PostPosted: Fri Sep 07, 2007 9:23 pm    Post subject:
Reply with quote

well if u know anyone that might know how to do this send them to this thread, thanks bro


_________________
kade
Back to top
View users profile Send private message Send email Visit posters website
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> General Site All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer