Amaya W3C

About Amaya

Download Amaya

Mailing Lists


Project Contributors

PUT configuration for the CERN server

Setting up a CERN server to support the PUT method involves three operations:

Writing a PUT compliant CGI-script

CGI-scripts that are PUT compliant are basically the same kind of scripts used to handle POST requests, with the addition of extra code to save to a file the data feed to them by a server. As a PUT script actually writes, or overwrites, files on a remote information, the source code of this type of scripts must be carefully reviewed to avoid security and system mishaps.

For more information

Changing the httpd configuration file

In order to handle PUT requests, the httpd configuration file must include:

For more information

Granting access-rights in the file system

If you're running the CERN server in a system which associates access-rights to files, such as Unix, you have to make sure that:

You might we wondering where are user access-rights actually enforced. The answer is that this happens inside the CERN server. Once the server authorizes a request, it just commands the PUT script to write a data file. If you consider it appropriate, you may do some additional access control inside the PUT script. In all cases, make sure the PUT script does not have write access on directories and files which should not be written by it! If you're using Unix, you can easily set this up by having the PUT script run under a specific-assigned user id.

José Kahan
Date: 2009-02-12

Copyright  ©  1994-2009 INRIA and W3C® (MIT, ERCIM, Keio), All Rights Reserved. W3C liability, trademark, document use and software licensing rules apply. Your interactions with this site are in accordance with our public and Member privacy statements.