Re: [cobalt-users] CGIWrap Problems Solved

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

"Virgil H. Huston, Jr." wrote:

> I haven't figured out CgiWrap yet

I suppose that's a good reason to not use it, eh?

> and have only found one script that worked with it. However, I just installed
> a Bulletin Board on one of my domains and got the dreaded Permission
> denied error.

Meaning you needed to make a minor change.

> I found that if I added a .htaccess file to the
> directory where the script(s) is, it will bypass CgiWrap and work! Here
> is what the .htaccess file should have in it:

So instead you threw out all your security.

I lsure hope you're using a carefully written Bulletin Board; you've
just given the world "write" access to the user the program runs on. 
And you've given the world the source code to the program as well, so
they can look for holes.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
Linux and Cobalt/Sun/RaQ Consulting
nobaloney.net
P. O. Box 52672, Riverside, CA  92517
voice: (909) 778-9980  *  fax: (702) 548-9484