Re: [cobalt-users] protect cgi scripts and data files

[Kris Dahl <kris@xxxxxxxxxxxxx>]

on 1/21/00 2:31 PM, James D. Williams at jdarden@xxxxxxxx wrote:

> Hi,
> 
> I have used Unix before on other machines, and the cgi-bin was protected
> somehow. Yet on the cobalt, the scripts and data files are out there in the
> open. Is there away to protect these files in the same manner as the cgi-bin
> is protected on other machines?

You can turn off the handler for .cgi and .pl in the httpd.conf, and make
the scripts have to be called from a /cgi or /cgi-bin directory that isn't
world readable.   http://www.apache.org has documentation on this.
Warning--if you have Miva merchant installed, it will take over the /cgi-bin
on EVERY site.  So don't use that as your path if you've got it installed.

-k