[6765] in RedHat Linux List
Apache: CGI script disable
daemon@ATHENA.MIT.EDU (Mick Ghazey)
Sat Nov 30 09:33:20 1996
From: "Mick Ghazey" <mghazey@miso.lowdown.com>
To: redhat-list@redhat.com
Date: Sat, 30 Nov 1996 09:31:28 +0000
Reply-to: mGhazey@lowdown.com
X-Confirm-Reading-To: mGhazey@lowdown.com
Resent-From: redhat-list@redhat.com
I want to disable user's ability to execute cgi outside of the cgi
scriptaliased directory. This should be easy. Below is an extract
from srm.conf. Notice that "AddHandler cgi-script .cgi" is commented
out. Doesn't seem to matter though. Programs with .cgi extensions are
executed out of any directory.
Any ideas?
Mick
---------------------------------
# If you want to use server side includes, or CGI outside
# ScriptAliased directories, uncomment the following lines.
# AddType allows you to tweak mime.types without actually editing it,
# or to make certain files to be certain types. Format: AddType
# type/subtype ext1
# AddHandler allows you to map certain file extensions to "handlers",
# actions unrelated to filetype. These can be either built into the
# server or added with the Action command (see below) Format:
# AddHandler action-name ext1
# To use CGI scripts:
# AddHandler cgi-script .cgi
# To use server-parsed HTML files
#AddType text/html .shtml
#AddHandler server-parsed .shtml
# Uncomment the following line to enable Apache's send-asis HTTP file
# feature
#AddHandler send-as-is asis
# If you wish to use server-parsed imagemap files, use
#AddHandler imap-file map
# To enable type maps, you might want to use
#AddHandler type-map var
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
________________________________________________________________________
http://www.redhat.com/RedHat-FAQ http://www.redhat.com/RedHat-Errata
http://www.redhat.com/RedHat-Tips http://www.redhat.com/mailing-lists
------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null
