Re: Vulnerability awareness

2000-06-07 Thread Eric Strovink
Gunther Birznieks wrote: snip From: Jan Dubois [EMAIL PROTECTED] I don't think so. You should never let people execute arbitrary code on your web server anyways. If you do, then the potential intruder can do much more nasty things than just snooping around in memory. -Jan I think Jan is

Vulnerability awareness (was: Re: FW: Apache::Dispatch)

2000-06-06 Thread Stas Bekman
Folks let me stress a little point (or a big, depending on how you look at this), I'm in no way try to discourage Geoff for creating yet another cool module. It's just that lately I read too much info about sites being hacked thru bugs in CGI code. Here is a must read, if you didn't read it yet.