ftp server issues and questions, please reply...

[phancore]

Hey guys, first of all, i'd like to say that i really dont know where to post this question, so i picked one close to i?

Well i run an ftp server and most people access it with I.E explorer or netscape and they can up/dwn, creat, del and etc with their account. Though my issue is when they enter there account information for example:
ftp://userphancore.com they can access it no problem, but once they logg off, someone else can log onto there account by typing ftp:///user etc and their password would be included in the "ftp://userassword@phancore.com". I know that IE and other explorers save urls so when u type the begin. of an url, u can select the drop down menue of all the related or similar urls IE saved automatically from other users.

Now I know u can go and change the settins on IE for it not to save url and pw automatically but if someone were to change it back, the user+pw would still pop up. I also have a dedicated website-is there anyway to have a script or form so that clients can enter their information on my page and use my ftp securely? BTW i'm using cute ftp 4.0.

**clients who access my servers are on public computers***

thankx in advance guys
-John

 

[sdeakin]

Hi John,

It sounds to me like you want the users to be able to browse the FTP site - why don't you just allow directory browsing for the directories you want FTP access to? You can then limit control to those directories, much like FTP login access. Most browsers will prompt you to enter a password at this stage rather than require it in the URL. You have not mentioned the Web Server - if it is Apache I can give you details on the config.

Good luck,
Scotty

 

[phancore]

Hey thanks a lot! I thought no one cared to look at this heheh. Well i'm using serv-u 4.0. Like you said, some browers will prompt you for the password which IE does. I have the user enter this "ftp://user@phancore.com" and it works fine for them, but once the enter there password(when promted), they can browse edit and what not, but once they close the browser for example, and found out they needed to do something else on their account, so they go to open the broswer and start typing(this is on a public computer) in the url "ftp://user@" yada yada and for some reason IE remembers the url plus the password before they get to finish typing in the url.

Thats why i'm asking is there any safer way to access my ftp site like an html script put on my website? These are public computers so they can't install cuteftp where ever they go you know? Please tell me what you think. thankx in advance.

-John (oh btw apache doesn't work for win2k for me some reason)