note 70481 deleted from security.general by danbrown

Note Submitter: lesley_b_linux at yahoo dot co dot uk ---- In answer to the first poster here, you shouldn't really be developing within the tree of a live Internet facing web server at all ever. All Linux distro's I have come across have the capability of running Apache on the localhost so at it's simplest level you should :- 0. Get the latest web site code from your version control system. 1. Do your development using the localhost web server 2. Check in your new site code to the version control system you are running. 3. Upload only the new or updated files to the active webserver You can use anything from ftp to sitecopy to upload your files and most advanced site copying tools allow you to ignore *.bak *~ or even entire directories if you need to. If you must develop on the server, then ssh in and use vi but look out for disconnects leaving vi .*.swp files aorund. (Why use vi? Because then you aren't exposing the web server to further insecurity by running the portmap deamon for the X-server required for emacs. ) That's speaking as someone who uses both emacs and vi.