🚀 go-pugleaf

David Meldrum (david@suffolk-maag.ac.uk) wrote:

: I have some users who update "their" page. At the moment they e-mail
: their versions to me and I post them on our DIVA site.

: Their is obviously no possibility of allowing them access to UK-upload
: direct, for basic security reasons. (Or am I wrong there? can they be
: allowed access to upload HTML only on a specified page ?)

If you only have one username/password on your DIVA account, then you
can't distinguish between one user and another, thus cannot allow
access only to specific areas when uploading.

: I do have password protected areas and imagine allowing the user to
: enter a form in his protected area would be a solution, with some simple
: scripting to deal with his new page.

: I am sure this must have been thought about and done repeatedly. Can
: some kind soul point me to the appropriate FAQs or scripts ?

I recently came across ispy.cgi, a neat little Perl script that allows
you to fiddle around in your web space and do various things (file
listing, upload, etc.) for those that do not have shell access. It is
available at NISoftware.com. It includes simple password protection.

It occurs to me that you could have one instance of ispy.cgi for each
of your users, with different passwords, and constrained to only allow
uploads to a particular folder within your web space. Perhaps some of
the other facilities (file delete) would also have to be nobbled
appropriately. I can't pretend this is a finished solution, but I
should think you would be able to get something up and running based on
it.

Andrew.
-- 
Andrew Haylett                      Tel. +44 1763 852222 Fax. +44 1763 853324
Software Engineer, Webmaster        Email: ajh@primagraphics.co.uk
Primagraphics, Nr. Cambridge, UK    Web: http://www.primagraphics.co.uk/

In article <9c0rab$78r$1@atlas.primag>, Andrew Haylett
<ajh@primag.co.uk> writes
>David Meldrum (david@suffolk-maag.ac.uk) wrote:
>If you only have one username/password on your DIVA account, then you
>can't distinguish between one user and another, thus cannot allow
>access only to specific areas when uploading.
>

Thanks. That is how I understood the position.

>I recently came across ispy.cgi, a neat little Perl script that allows
>you to fiddle around in your web space and do various things (file
>listing, upload, etc.) for those that do not have shell access. It is
>available at NISoftware.com. It includes simple password protection.
>
>It occurs to me that you could have one instance of ispy.cgi for each
>of your users, with different passwords, and constrained to only allow
>uploads to a particular folder within your web space. Perhaps some of
>the other facilities (file delete) would also have to be nobbled
>appropriately. I can't pretend this is a finished solution, but I
>should think you would be able to get something up and running based on
>it.
>
>Andrew.

Thanks again, that sounds exactly what I had in mind, I will "fiddle
with it"


Best wishes
-- 
David Meldrum
david@suffolk-maag.ac.uk
http://www.suffolk-maag.ac.uk