With Apache it is fairly easy but why you would do it is beyond me as they 
will then run anything in those directories and that is how you mess with 
a web server by allowing users to freely run cgi scripts. This is why most 
free websites don't give you access to CGI stuff or other server side 
capabilities. Most of there sites would have been hacked by now with this 
enabled.

You need to modify the a Location section

Read up the Apache doco on this as it will explain how a user can use this 
to create exploits on the server

Cheers


--
=================================================
Peter McLarty               E-mail: [EMAIL PROTECTED]
Technical Consultant        WWW: http://www.mincom.com
APAC Technical Services     Phone: +61 (0)7 3303 3461
Brisbane,  Australia        Mobile: +61 (0)402 094 238
                            Facsimile: +61 (0)7 3303 3048
=================================================
A great pleasure in life is doing what people say you cannot do.

    - Walter Bagehot (1826-1877 British Economist)
=================================================
Mincom "The People, The Experience, The Vision"

=================================================

This transmission is for the intended addressee only and is confidential 
information. If you have received this transmission in error, please 
delete it and notify the sender. The contents of this e-mail are the 
opinion of the writer only and are not endorsed by the Mincom Group of 
companies unless expressly stated otherwise. 






"Alroy Mascranghe" <[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED]
14-08-2002 05:13 PM
Please respond to ORACLE-L

 
        To:     Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]>
        cc: 
        Fax to: 
        Subject:        OT:  user CGI-BIN directories


To execute the cgi scripts thru web/HTML forms we had to put them in the
common cgi-bin directory. But is there a way to have these scripts in a
user's home directory and still call them thru web/HTML forms?

TIA


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Alroy Mascranghe
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).



-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: 
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Reply via email to