Re: Execute Perl in any directory

[support@xxxxxxxxxxxxxx (Tenon Support)]

Warren,

> a client recently asked this of me.
>
> At 10:01 AM -0500 11/16/01, client wrote:
> > We start to play with Perl on the www2 box, and I have a request.
> >
> > Can you set the webserver config so that we can execute Perl in any
> > directory?

This is not a good idea.   It is a major security issue.

> If that presents a problem, then can you link /faq/cgi-local to
> > /cgi-bin?
> >
> > The first option is much preferable, but if that's not possible, then the
> > second is option will do also.
> >
> > Thanks!
>
>
> Is the first option even advisable? Any danger from permitting Perl 
> execution in any directory within the site?


> If possible and safe  to do, would it just involve setting a script 
> alias for /cgi-gin/ to websites/theirsite/?


Do they have their own cgi-bin?  If not, set up a script alias in the 
admin server in the virtualhost config under Aliases.  It would look 
like:

/cgi-bin/    X   /WebSites/theirsite/cgi-bin/

the X represents the checked script alias box.

then make a copy of WebTen's cgi-bin folder, empty the contents and 
put it in their website. They should be all set.  The ScriptAlias 
will override the default ScriptAlias that sends it to the cgi-bin 
and also allow execution of scripts in there

TTS
--Eric

> --
>
> Internet Tools for Business --  <http://www.CyberSpaces.net/>
> E-commerce web hosting
>
>
> ---------                    ----------
> Tenon Intersystems' webten Mailing List
> To unsubscribe: send mailto://webten-request@xxxxxxxxxxxxxxx
> with the body: unsubscribe
> Find searchable Mailing List archives at:
> http://listsearch.blueworld.com/webtensearch.lasso


---------                    ----------
Tenon Intersystems' webten Mailing List
To unsubscribe: send mailto://webten-request@xxxxxxxxxxxxxxx
with the body: unsubscribe
Find searchable Mailing List archives at:
http://listsearch.blueworld.com/webtensearch.lasso