Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.python > #50066

Re: Geo Location extracted from visitors ip address

From Dennis Lee Bieber <wlfraed@ix.netcom.com>
Subject Re: Geo Location extracted from visitors ip address
Date 2013-07-06 10:43 -0400
Organization IISS Elusive Unicorn
References (4 earlier) <kr7n56$jco$3@news.grnet.gr> <mailman.4319.1373072195.3114.python-list@python.org> <kr7qq2$vqj$1@news.grnet.gr> <mailman.4322.1373079131.3114.python-list@python.org> <kr8ft0$g65$1@news.grnet.gr>
Newsgroups comp.lang.python
Message-ID <mailman.4338.1373121805.3114.python-list@python.org> (permalink)

Show all headers | View raw


On Sat, 06 Jul 2013 10:10:22 +0300, ????? Gr33k <nikos@superhost.gr>
declaimed the following:

>It was some guy form hostgator.com that had told me that a python script 
>has the same level of access to anything on the filesystem as its 
>coressponding user running it, implying that if i run it under user 
>'root' the python script could access anything.
>
	Yes, IF YOU RUN IT UNDER "root"... The ownership of the script file
doesn't control the privileges it runs under as long as the file itself is
read-access to other "users".

>Are you sure that python scripts run under Apache user or Nobody user in 
>my case and not as user 'nikos' ?
>
	That is the /normal/ way a web-server (or any server) should be
configured -- explicitly to prevent operations from leaking into the rest
of the system.

>Is there some way to test that?
>

	There are a whole bunch of methods in the os module (which I can't
demonstrate as 95% of them are UNIX type OS only, and I'm running under
Win7). All sorts of things for retrieving group and user IDs. Only thing I
can access on Win7 is the least reliable items... (username is an
environment variable, and as such could have been changed from the real
user by something in the startup)

>>> import os
>>> os.environ["username"]
'Wulfraed'
>>> os.getcwd()
'C:\\Users\\Wulfraed'
>>> 

-- 
	Wulfraed                 Dennis Lee Bieber         AF6VN
    wlfraed@ix.netcom.com    HTTP://wlfraed.home.netcom.com/

Back to comp.lang.python | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Geo Location extracted from visitors ip address Νίκος Gr33k <nikos@superhost.gr> - 2013-07-05 22:08 +0300
  Re: Geo Location extracted from visitors ip address Tim Chase <python.list@tim.thechases.com> - 2013-07-05 14:58 -0500
    Re: Geo Location extracted from visitors ip address Νίκος Gr33k <nikos@superhost.gr> - 2013-07-06 02:55 +0300
      Re: Geo Location extracted from visitors ip address Νίκος Gr33k <nikos@superhost.gr> - 2013-07-06 02:58 +0300
        Re: Geo Location extracted from visitors ip address Νίκος Gr33k <nikos@superhost.gr> - 2013-07-06 03:08 +0300
          Re: Geo Location extracted from visitors ip address Joel Goldstick <joel.goldstick@gmail.com> - 2013-07-05 20:56 -0400
            Re: Geo Location extracted from visitors ip address Νίκος Gr33k <nikos@superhost.gr> - 2013-07-06 04:10 +0300
              Re: Geo Location extracted from visitors ip address Νίκος Gr33k <nikos@superhost.gr> - 2013-07-06 04:41 +0300
                Re: Geo Location extracted from visitors ip address Νίκος Gr33k <nikos@superhost.gr> - 2013-07-06 11:01 +0300
                Re: Geo Location extracted from visitors ip address Chris Angelico <rosuav@gmail.com> - 2013-07-06 18:30 +1000
                Re: Geo Location extracted from visitors ip address Νίκος Gr33k <nikos@superhost.gr> - 2013-07-06 11:41 +0300
                Re: Geo Location extracted from visitors ip address Tim Chase <python.list@tim.thechases.com> - 2013-07-06 06:20 -0500
                Re: Geo Location extracted from visitors ip address Νίκος Gr33k <nikos@superhost.gr> - 2013-07-06 23:14 +0300
                Re: Geo Location extracted from visitors ip address Tim Chase <python.list@tim.thechases.com> - 2013-07-06 15:32 -0500
                Re: Geo Location extracted from visitors ip address Νίκος Gr33k <nikos@superhost.gr> - 2013-07-06 23:51 +0300
                Re: Geo Location extracted from visitors ip address Νίκος Gr33k <nikos@superhost.gr> - 2013-07-07 12:40 +0300
                Re: Geo Location extracted from visitors ip address Dave Angel <davea@davea.name> - 2013-07-06 07:49 -0400
                Re: Geo Location extracted from visitors ip address Robert Kern <robert.kern@gmail.com> - 2013-07-06 11:21 +0100
                Re: Geo Location extracted from visitors ip address Grant Edwards <invalid@invalid.invalid> - 2013-07-08 14:27 +0000
                Re: Geo Location extracted from visitors ip address Grant Edwards <invalid@invalid.invalid> - 2013-07-08 14:27 +0000
              Re: Geo Location extracted from visitors ip address Joel Goldstick <joel.goldstick@gmail.com> - 2013-07-05 21:31 -0400
              Re: Geo Location extracted from visitors ip address Dennis Lee Bieber <wlfraed@ix.netcom.com> - 2013-07-05 22:52 -0400
                Re: Geo Location extracted from visitors ip address Νίκος Gr33k <nikos@superhost.gr> - 2013-07-06 10:10 +0300
                Re: Geo Location extracted from visitors ip address Dennis Lee Bieber <wlfraed@ix.netcom.com> - 2013-07-06 10:43 -0400
                Re: Geo Location extracted from visitors ip address Νίκος Gr33k <nikos@superhost.gr> - 2013-07-06 23:12 +0300
                Re: Geo Location extracted from visitors ip address Tim Chase <python.list@tim.thechases.com> - 2013-07-06 15:33 -0500
                Re: Geo Location extracted from visitors ip address Νίκος Gr33k <nikos@superhost.gr> - 2013-07-06 23:49 +0300
                Re: Geo Location extracted from visitors ip address Dennis Lee Bieber <wlfraed@ix.netcom.com> - 2013-07-06 18:36 -0400
  Re: Geo Location extracted from visitors ip address Support by Νίκος <nikos@superhost.gr> - 2013-07-05 22:59 +0300
  Re: Geo Location extracted from visitors ip address Tim Roberts <timr@probo.com> - 2013-07-05 13:44 -0700
    Re: Geo Location extracted from visitors ip address Dave Angel <davea@davea.name> - 2013-07-05 17:18 -0400
    Re: Geo Location extracted from visitors ip address Chris Angelico <rosuav@gmail.com> - 2013-07-06 11:06 +1000
  Re: Geo Location extracted from visitors ip address Tim Chase <python.list@tim.thechases.com> - 2013-07-05 17:21 -0500
  Re: Geo Location extracted from visitors ip address Grant Edwards <invalid@invalid.invalid> - 2013-07-05 22:24 +0000
  [OT] Re: Geo Location extracted from visitors ip address Tony the Tiger <tony@tiger.invalid> - 2013-07-06 13:23 -0500
  Re: Geo Location extracted from visitors ip address Joel Goldstick <joel.goldstick@gmail.com> - 2013-07-05 15:23 -0400
  Re: Geo Location extracted from visitors ip address Jerry Hill <malaclypse2@gmail.com> - 2013-07-05 15:28 -0400
  Re: Geo Location extracted from visitors ip address Support by Νίκος <nikos@superhost.gr> - 2013-07-05 22:43 +0300

csiph-web