Added section about multiple FAQs.

1 files changed, 22 insertions, 2 deletions

diff --git a/Tools/faqwiz/README b/Tools/faqwiz/README
index bbcf1e3..0f494aa 100644
--- a/Tools/faqwiz/README
+++ b/Tools/faqwiz/README
@@ -44,8 +44,9 @@ additional files here!)
 
 Edit faqconf.py to reflect your setup.  You only need to edit the top
 part, up till the line of all dashes.  The comments should guide you
-in your edits.  You can also choose to make your changes to faqcust.py
-and leave faqconf.py alone.
+in your edits.  (Actually, you can also choose to add your changes to
+faqcust.py and leave faqconf.py alone.  This is essential if you are
+maintaining multiple FAQs; see below.)
 
 Don't forget to edit the SECTION_TITLES variables to reflect the set
 of section titles for your FAQ!
@@ -75,4 +76,23 @@ file faq01.001.htp,v in the RCS subdirectory.  You can now exercise
 the other FAQ wizard features (search, index, whole FAQ, what's new,
 roulette, and so on).
 
+Maintaining Multiple FAQs
+-------------------------
+
+If you have multiple FAQs, you need a separate FAQDIR per FAQ, and a
+different customization file per FAQ.  The easiest thing to do would
+be to have the faqcust.py for each FAQ live in the FAQDIR for that
+FAQ, but that creates some security concerns, since the FAQDIR must be
+world writable: *if* someone who breaks into your system (or a
+legitimate user) manages to edit the faqcust.py file they can get
+arbitrary code to execute through the FAQ wizard.  Therefore, you will
+need a more complex setup.
+
+The best way is probably to have a directory that is only writable by
+you for each FAQ, where you place the copy of faqcust.py for that FAQ,
+and have a world-writable subdirectory DATA for the data.  You then
+set FAQDIR to point to the DATA directory and change the faqw.py
+bootstrap script to add FAQDIR/.. to sys.path (in front of SRCDIR, so
+the dummy faqcust.py from SRCDIR is ignored).
+
 --Guido van Rossum (home page: http://www.python.org/~guido/)