Shawn H Corey <shawnhco...@gmail.com> writes:

> The directory's permissions must be writable to create new files.
> Apparently it is not to your web server.
>
> It is considered a security breach to have the directory that contains
> your CGIs writable.  Consider putting the files in a subdirectory not
> accessible via the web.

This might ought to be another thread... but I wondered...in the case
where cgi is allowed in any directory.. how can they be kept from
being seen?

I have just always included an index.html.. so that someone trying to
see inside the directory... just gets the index.html.

I suppose a miscreant could just keep trying different filenames and
get lucky.  Or is there some systematic way to discover whats in a
directory with an index.html present?


-- 
To unsubscribe, e-mail: beginners-unsubscr...@perl.org
For additional commands, e-mail: beginners-h...@perl.org
http://learn.perl.org/


Reply via email to