At Wed, 14 Mar 2001 13:05:05 +0000, David Cantrell <[EMAIL PROTECTED]> wrote:

> On Wed, Mar 14, 2001 at 11:50:04AM +0000, Jon Eyre wrote:
> 
> > In my experience, virtually *all* isps/hosting providers use the
> > 'separate cgi-bin directory' configuration. either for the 
> > security reasons outlined by evil dave ...
> 
> Eh-hem.
> 
> Evil Dave's server does *not* use seperate cgi-bin directories - but 
> then, there's no ftp file upload, and the ftp root is in a different 
> place from the web root anyway, and HTTP file upload is also not 
> permitted.

And besides, it wasn't Evil Dave that pointed out the security issues.

(Nice) Dave...

Reply via email to