Re: [cobalt-users] CGI bin directory outside document root

[Revd leonard payne <vicarage@xxxxxxxxxxxxxx>]

on 17/4/01 5:19 am, Keith Davis at cache@xxxxxxxxxx wrote:

> Jamie Sue Winkelman wrote:
>> 
>> I understand that for security reasons, the cgi-bin directory should be
>> located outside the server's document root. Where is the best place to
>> put this directory? How do I then call scripts located in that
>> directory?
>> 
<snip>
> Place your script anywhere you want in the domain and give it only 0711
> permissions.  Since browsers and other http clients are 'world' users
> they can still execute the script, but they cannot read it or write to
> it. Only the 'owner' can rw on that file.
>

I would much prefer to have what Jamie wants as well. To have the cgi-bin
directory totally outside the web site - A Common cgi-sys directory for all.

My Raq is even worse in that it allows execution of a script from any
directory.

Anythoughts ladies and gents??

Revd Leonard