On Thu, 22 Jul 1999, you wrote:
-If you haven't changed your httpd.conf, it should be on line 403. Change
-it to:
-Options Indexes Includes FollowSymLinks ExecCGI
This will work but I disagree with it being the "right" solution. It
is better to leave the default to the most restrictive settings
reasonable and open them up on a case by case basis.
-RedHat's configuration is pretty insecure by default and I have seen many
-sites get hacked. On Mandrake, I made sure it was easy enough for
-beginners, while secure.
-
-By the way, don't **ever** put a cgi chmoded 777! It's world writable and
-executable, and anyone with knowledge can take control of your cgis if you
-do that. Please, chmod it to 755.
Very good advice. I "hacked" one of my employers's databases (it's
part of my job :-) using just this technique.
-Jean-Michel
[EMAIL PROTECTED]
-
-On Thu, 22 Jul 1999, Axalon wrote:
-
- Date: Thu, 22 Jul 1999 18:33:01 -0600 (MDT)
- From: Axalon [EMAIL PROTECTED]
- Reply-To: [EMAIL PROTECTED]
- To: "[EMAIL PROTECTED]" [EMAIL PROTECTED]
- Subject: Re: [expert] apache 1.3.6 and .cgi scripts not in cgi-bin
-
-
- Make sure you have a "Options ExecCGI" in the section covering the
- directory in question.
-
-
- On Thu, 22 Jul 1999, Duncan Hall wrote:
-
- I've uncommented the line in httpd.conf
-
- # To use CGI scripts:
- AddHandler cgi-script .cgi
-
- I'm using apache-1.3.6-50mdk
-
- When I try to run a script that is not in the cgi-bin I get the following Error
-
- 403
-
- Forbidden
-
- You don't have permission to access /Weekly/CHARTS/index.cgi on this server.
-
- To test it I have chmod 777 but still no luck.
-
- Before I get flamed about perl scripts not in cgi-bin, this script is on a secure
intranet.
-
- It worked perfectly on redhat 5.2 with apache 1.3.2
-
- Any thoughts
-
- Dunc
-
- --
- //
- Duncan Hall
- SysAdmin/WebMaster
- Viator Systems [ http://www.viator.com ]
- ... e-commerce systems for the travel industry
- tel: +61 2 9361 6137 fax: +61 2 9360 9885
- -//
-
-
-
-
--
Stephen Carville
--
Operating complicated machinery whilst possessed of the
cognitive powers of a sea slug and the disposition
of a polar bear with a toothache is very unwise
