CallSite Server Installation
 
 

Section: II.G

Security Issues

Two directories in your CallSite installation contain sensitive information. The 'users' directory contains files holding personal details and passwords. The 'data' directory contains files holding the server's configuration and your license key code.

These files are placed in separate subdirectories during the CallSite installation process so that you can easily protect them against intrusion. Most Web servers allow you to include a file specifying 'access control lists' in any directory of your Web hierarchy. This file is usually named '.htaccess' and it allows you to selectively deny read access to files within that directory to Internet hosts, based on a login/password access or based on their IP address.

For your convenience, an access control file that prevents anyone from accessing these sensitive files has been placed in both the 'users' and 'data' directories. You will need to rename it from 'x.htaccess' to '.htaccess' to enable this protection. (File names beginning with a dot are usually hidden from the user. This file was initially named with an 'x' at the beginning for it to appear on a file list.)