ILYAS415 Posted February 15, 2008 Share Posted February 15, 2008 How can i prevent user enumeration on my site? I have no idea how to and when i googled it I couldnt understand the results i was given. Any help will be appreciated. Thanks. Link to comment https://forums.phpfreaks.com/topic/91264-need-help-with-security-issue/ Share on other sites More sharing options...
cooldude832 Posted February 15, 2008 Share Posted February 15, 2008 I too h ave no clue what your cryptic user enumeration is sounds like it is preventing unknown ppl from your site Maybe instead of using fancy words you should ask what you need instead. Link to comment https://forums.phpfreaks.com/topic/91264-need-help-with-security-issue/#findComment-467710 Share on other sites More sharing options...
ILYAS415 Posted February 15, 2008 Author Share Posted February 15, 2008 Well basically i had someone beta test my site and he came up with this and told me its a user enumeration... http://www.ragingmortals.com/~ragingmo/ Link to comment https://forums.phpfreaks.com/topic/91264-need-help-with-security-issue/#findComment-467718 Share on other sites More sharing options...
cooldude832 Posted February 15, 2008 Share Posted February 15, 2008 i'm not gonna waste my time beting it so ask for what specifically the problem is Link to comment https://forums.phpfreaks.com/topic/91264-need-help-with-security-issue/#findComment-467720 Share on other sites More sharing options...
drewbee Posted February 15, 2008 Share Posted February 15, 2008 cooldude, Its not hard to figure out; He wants to know how to prevent user enumeration; what is so difficult to understand about this? Personally, I do not know how to keep this from happening; but the basics behind user enumeration is that for every account on a host, you can access the users public_html folder by going to mydomain.com/~username which you can also access mydomain.com/~root Unfortunately, I do not know how to prevent this from happening. Link to comment https://forums.phpfreaks.com/topic/91264-need-help-with-security-issue/#findComment-467730 Share on other sites More sharing options...
rhodesa Posted February 15, 2008 Share Posted February 15, 2008 It's an apache directive: http://httpd.apache.org/docs/2.0/mod/mod_userdir.html Link to comment https://forums.phpfreaks.com/topic/91264-need-help-with-security-issue/#findComment-467738 Share on other sites More sharing options...
drewbee Posted February 15, 2008 Share Posted February 15, 2008 Thanks Rhodesa, this information is very useful. Link to comment https://forums.phpfreaks.com/topic/91264-need-help-with-security-issue/#findComment-467775 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.