[cobalt-users] Re: how to disable cgiwrap for only one particular .cgi script ?

[Bruce Timberlake <bruce@xxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> How & where can I disable cgiwrap *only* for the
> script :  /home/sites/www.mysite.com/web/myscript.cgi

In /etc/httpd/conf/httpd.conf change the 

	AddHandler cgi-wrapper .cgi

directive to

	AddHandler cgi-script .cgi

and then restart Apache

	/etc/rc.d/init.d/httpd reload

You won't be able to change this just for the one CGI though; all .cgi scripts 
in that virtual site will be run without wrapper protection.

> Also, what are the consequences (risks?) of such a change ?

No wrapper protection. A script that is owned/suid root, etc, will have full 
ability to run as that user, and potentially do anything (delete files, etc).

I'd be very sure it's the cgi-wrapper stuff causing your problems, and not 
something in the script itself.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE/guTdvLA2hUZ9kgwRApy0AJ4yFv3aBn8NdwX8vJ3l29bv/60QgQCeIbEV
0aPghDXcLrADIKyRbTg1n0E=
=de0Z
-----END PGP SIGNATURE-----