[oclug]setting two cgi-bin directories under apache

Strosberg, Bill bstrosberg at rcpsc.edu
Thu Jan 30 09:52:26 EST 2003


> From: Maximo Ramos [mailto:maximo at violadores.org]
> Sent: Thursday, January 30, 2003 9:28 AM
> To: oclug at lists.oclug.on.ca
> Subject: [oclug]setting two cgi-bin directories under apache
> 
> 
> Hi
> 
> I just gave up searching in the web for this ...
> 
> I would like to define two cgi-bin directories, like:
> 
> /usr/local/apache/cgi-bin/
> /home/*/cgi-bin/

Maximo:

If you allow FollowSymLinks in the user cgi-bin directory, you could create
symbolic links to the entries in the system /cgi-bin/ directory.

i.e.

ln -s /var/www/cgi-bin/* /home/maximo/cgi-bin

You should be aware that cgi-bin programs are executables running with the
priviledges of the web server user.  Using "standard" script resources like
formmail from Matt's script archive etc. create huge security holes, and may
turn you into an unknowing spammer.  Generally, avoid giving users scripting
capabilities unless absolutely necessary, then vet the code yourself, as
it's your webserver all the spam blacklist lookups will resolve to!

--
Bill Strosberg



More information about the OCLUG mailing list