The file permissions are the same as were there on lthcwww.
The directory "/var/www/demos/encoding" has permission

drwxr-sr-x  4 rathi  ipgdemos 4096 2008-08-22 12:15 maxwell

This is the directory structure of "/var/www/demos/maxwell"
with permissions.

drwxr-sr-x 2 rathi ipgdemos  4096 2008-07-24 15:28 images
-rw-r--r-- 1 rathi ipgdemos 37775 2008-08-15 20:24 index.php
-rw-r--r-- 1 rathi ipgdemos  4650 2008-07-24 15:28 js_top.js
-rw-r--r-- 1 rathi ipgdemos 32043 2008-08-14 16:51 lthc_index.php
-rwxrwxrwx 1 rathi ipgdemos    15 2008-07-24 15:28 maxwell_link_cmd
drwxr-sr-x 2 rathi ipgdemos  4096 2008-07-24 15:49 sim

The file "lthc_index.php" has the old lthc way of giving inputs.

Line 40: the file "js_top.js" is displayed.
Line 95: file "images/explosionblank.jpg" is displayed.
Line 111 to 132: file "images/graph*.jpg" is displayed.
Line 151: Paper "paper/maxwell.ps" is displayed.
Line 185 to 514: Polynomials are exploded to obtain degree distribution.
Line 672: Input values are written to "/var/www/demos/files/maxwellexit/paraminput".
Line 704: Another file is being written.
Line 704: System command to cat some files.
Line 734, 735, 830: File conversions.
Line 849: ps file output is shown.
Line 46 to 396: The code is about checking the validity of the polynomials.
Line 554 to 573: parameters are written if there is an input from the user.
Line 574: Execution of the command to generate the image.
Line 580: pbm to gif generated.
Line 594: gif is displayed.

Permanent images are there in "/var/www/demos/maxwell/images/".

The directory "/var/www/demos/files/maxwellexit" has permission

drwxr-sr-x 3 rathi ipgdemos  4096 2008-08-22 11:30 maxwellexit

Inside the directory "/var/www/demos/files/maxwellexit" there are some ps and param files.

[rathi@iscsrv32 maxwellexit]$ ls -l
total 436
-rw-r--r-- 1 rathi ipgdemos    907 2008-08-22 11:30 averaged_prof.dat
-rw-r--r-- 1 rathi ipgdemos    895 2008-08-22 11:30 channelcode.ps
drwxrws--- 2 rathi ipgdemos   4096 2008-07-24 15:41 distribution
-rw-r--r-- 1 rathi ipgdemos  54257 2008-08-22 11:30 EXITcurvedata.ps
-rw-r--r-- 1 rathi ipgdemos    509 2008-08-22 11:30 EXITitphases.ps
-rw-r--r-- 1 rathi ipgdemos    487 2008-08-22 11:30 EXITmlphases.ps
-rw-r--r-- 1 rathi ipgdemos   5579 2008-08-22 11:30 EXIT.png
-rw-r--r-- 1 rathi ipgdemos 225552 2008-08-22 11:30 EXIT.ps
-rw-r--r-- 1 rathi ipgdemos  72684 2008-08-22 11:30 graph
-rwxr-xr-x 1 rathi ipgdemos   8137 2008-08-22 11:30 param
-rw-r--r-- 1 rathi ipgdemos     21 2008-08-22 11:30 phasestransitions.dat
-rw-r--r-- 1 rathi ipgdemos   7777 2008-08-22 11:30 profil600.png
-rw-r--r-- 1 rathi ipgdemos   8094 2008-08-22 11:30 profil600.ps
-rw-r--r-- 1 rathi ipgdemos      4 2008-08-22 11:30 temp_blocklength
-rw-r--r-- 1 rathi ipgdemos      5 2008-08-22 11:30 temp_channel
-rw-r--r-- 1 rathi ipgdemos      2 2008-08-22 11:30 temp_loopnum
-rw-r--r-- 1 rathi ipgdemos      5 2008-08-22 11:30 temp_options

There are no different session id's. I think we do not need it except
for the ps file which contains the output.

Then we need to make sure the permission issues are resolved from the
security point of view.