AW: Web site: checkout or export?

Hi, Andy,

Von: Andy Canfield [mailto:andy.canfield_at_pimco.mobi]

> - Using 'svn checkout', the working web site will have the subversion
> control files in the .svn subdirectory, which might be a security hole.

You could use some pattern based access control (Apache is very configurable in that respect) to prevent remote access to all pathes containing .svn in their url.

And the security hole should be not that large, as the .svn directory usually does not contain any authentication information.

Subversion 1.7 will further improve on that situation, you only have a single .svn directory then. And you can use the trick of directing the webserver to a subdir of your working copy, so the .svn directory is completely out of the web servers path.

Mit freundlichen Grüßen

Markus Schaber

___________________________
We software Automation.

3S-Smart Software Solutions GmbH
Markus Schaber | Entwicklung
Memminger Str. 151 | 87439 Kempten | Tel. +49-831-54031-0 | Fax +49-831-54031-50

Email: m.schaber@3s-software.com | Web: http://www.3s-software.com
CoDeSys Internet-Forum: http://forum.3s-software.com

Geschäftsführer: Dipl.Inf. Dieter Hess, Dipl.Inf. Manfred Werner | Handelsregister: Kempten HRB 6186 | USt-IDNr.: DE 167014915
Received on 2011-07-27 15:21:24 CEST