If you are using IIS and ActivePerl, one of the best bets is to use the
ISAPI version of Perl.  Go under the Internet Service Manager, right click
"Default Website" and Properties.  Choose the Home Directory tab and click
"Configuration".  Find .CGI or .PL (whichever you are using for you CGI
apps, highlight it and choose Edit.  Change the executable path to
C:\Perl\bin\perlis.dll and check the script engine box.  Choose OK and you
are set.  At this point, the folder you run your CGI scripts from will only
need Script access not Script and Executable.  The only down side is you
will be running in the same memory space with IIS.  If this is a problem,
change the Application Protection to High.  Hope this helps.

Robert L. Spitzer, MCSA, MCSE
Windows Integration Team
[EMAIL PROTECTED]



-----Original Message-----
From: Neil Perl [mailto:[EMAIL PROTECTED]] 
Sent: Saturday, June 08, 2002 9:15 AM
To: [EMAIL PROTECTED]
Subject: Most secure place for CGI scripts


Can anybody offer some advice on where it it best to place a CGI script on a

Win32 web server, in order to prevent hacking?

Is it safe to create a cgi-bin directory underneath the root of the 
directory tree for a particular web site (not the root directory of the 
server itself) or is it best to place it well away from here?

Any advice on this, and other related general security issues will be 
gratefully received.

Thanks
N

_________________________________________________________________
MSN Photos is the easiest way to share and print your photos: 
http://photos.msn.com/support/worldwide.aspx

_______________________________________________
Perl-Win32-Admin mailing list [EMAIL PROTECTED]
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs
_______________________________________________
Perl-Win32-Admin mailing list
[EMAIL PROTECTED]
To unsubscribe: http://listserv.ActiveState.com/mailman/mysubs

Reply via email to