Ok, I got it now. You mentioned tainted and I started looking at that closer. The variables were not properly untainted before using them to make a directory. Thanks for the help Tom
On Thu, 13 Feb 2003 20:49:45 -0500, Wiggins d'Anconia wrote > Tom McKellips wrote: > > I tried your line and the only thing that happens is I get an error page in > > the browsererror 500 and the only thing I can find in the log files is > > premature end of script headers. I have tried the script with and without > > the -T set still no luck either way. > > > > Had you already printed the header before the error line I included? > > Ok, so doesn't appear to be a problem with taint mode. I assume you > have tried cutting out everything except for the lines in question, > aka the mkdir? > > I am still wondering if it is maybe that the web server is running > as a different user, or even maybe 'nobody' and if that has an > effect on it. Can you log in as the user that the web server runs > as? After doing that can you run it command line? I don't have a > lot of experience with setuid, especially on scripts run over a web server... > > Just trying to come up with something... > > http://danconia.org -- Internet Service Provided By Abyss Communications A leader in Dial up and Satellite Internet Access 1-866-842-2977 -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
