Re: [cobalt-users] CGI Problems

[Terry Churchill <terry@xxxxxxxxx>]

Sales - Way to the Web <sales@xxxxxxxxxxxxxxx> Said:
> Hello Terry,
> 
> > How can the script be run, without cgi-wrap and create files 
> > owned by the user?
> 
> AFAIK, it cannot. That's the whole point of using CGI-Wrap, it runs CGI
> scipts under a specific user/group - without it you're resitricted to
> running CGI scripts and creating files under the UID of the httpd process.
> Otherwise you'd have one great big security hole on your hands if a CGI
> script could simply create files using an arbitary user/group.

Yep, that's what I thought. I'll convince him to use CGI-Wrap then.

Thanks for your help
-- 

Terry Churchill - x4483
0845 272 0041 : http://www.demon.net : terry@xxxxxxxxx