[EHPweb] Spurious files on EHP website

Lisa A Wald lisa at usgs.gov
Tue Aug 25 15:51:16 GMT 2009


To everyone with an account on the EHP web servers:

Please read this message from Eric Martinez, and take it under  
advisement.

> In looking at the website I am finding quite a few spurious files  
> and folders.  These have crept in through EHPDevel and made their  
> way actually onto the production servers.  Some of these I know are  
> from the various development tools we use (Dreamweaver etc...),  
> others probably come from mistakenly pushing extra content from our  
> desktop machines, still others are backup or temporary files.  While  
> many of these files are of no consequence, others contain usernames,  
> email addresses, passwords, or reveal directory structure on our  
> servers.  These are not things we want the public to see.  On EHP1,  
> excluding the eqcenter directory, there were 1,717 of these files  
> (possibly more, I only searched for well-known offending file  
> names).  I'm working on cleaning these up but moving forward I think  
> we all need to be a little more aware of what we're doing, what the  
> side-effects might be, and we need to remember to take a few minutes  
> to clean up after ourselves when we finish a development project.

Thanks
- Lisa
------





-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://geohazards.usgs.gov/pipermail/ehpweb/attachments/20090825/cf798b10/attachment.html 


More information about the EHPweb mailing list