From owner-freebsd-questions Thu Mar 7 15: 2:48 2002 Delivered-To: freebsd-questions@freebsd.org Received: from dns2.digitalglobe.com (dns2.digitalglobe.com [205.166.175.35]) by hub.freebsd.org (Postfix) with ESMTP id 55B9F37B404 for ; Thu, 7 Mar 2002 15:02:36 -0800 (PST) Received: from lohr.digitalglobe.com (lohr.digitalglobe.com [10.10.11.18]) by dns2.digitalglobe.com (8.11.4/8.11.4) with ESMTP id g27N29s39108; Thu, 7 Mar 2002 16:02:10 -0700 (MST) Subject: RE: Still need help with configuring cgi-bin From: John-David Childs To: Jonas Fornander Cc: "'David A. Hauan'" , questions@FreeBSD.ORG In-Reply-To: <039a01c1c5b4$4ccf1730$0800a8c0@master> References: <039a01c1c5b4$4ccf1730$0800a8c0@master> Content-Type: text/plain Content-Transfer-Encoding: 7bit X-Mailer: Evolution/1.0.2-4mdk Date: 07 Mar 2002 16:02:09 -0700 Message-Id: <1015542131.17572.63.camel@lohr> Mime-Version: 1.0 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Thu, 2002-03-07 at 01:44, Jonas Fornander wrote: > OK, it works if I add ExecCGI to section, but isn't that a > security issue? Now they can run scripts in any directory not just the > cgi-bin. Uh, YEAH! Honestly, ya need to RTFM the Apache docs at http://httpd.apache.org, but the short answer is: Do one of the following: For a SINGLE user running his/her own CGI, add the Script-Alias directive for that user...something like: ScriptAlias /jouser-cgi/ "/home/joeuser/public_html/cgi-bin" Options ExecCGI For multiple users on a system, look into the "suexec" setup: http://httpd.apache.org/docs/suexec.html And finally, Section F of: http://httpd.apache.org/docs/misc/FAQ.html > > Jonas Fornander - System Administrator > Netwood Communications, LLC - www.netwood.net > Find out why we're better - 310-442-1530 > > > -----Original Message----- > > From: owner-freebsd-questions@FreeBSD.ORG > > [mailto:owner-freebsd-questions@FreeBSD.ORG] On Behalf Of > > David A. Hauan > > Sent: Wednesday, March 06, 2002 1:46 PM > > To: Jonas Fornander > > Cc: questions@FreeBSD.ORG > > Subject: Re: Still need help with configuring cgi-bin > > > > > > Jonas Fornander wrote: > > > > > > I still can't get the scripting to work in users directory. I have > > > tried every combination but to no avail. I am restarting > > apache after > > > any change to httpd.conf and I don't have a cached page in the > > > browser. > > > > > > In the hope that someone from the group - with more experience and > > > knowledge than myself - would be kind enough to assist > > further, I have > > > pasted my httpd.conf configuration below my sig. To keep > > the file size > > > down, I have removed all comments except if a command was commented > > > out in the original install configuration. > > > > > > I'm trying to get scripting to run in > > > /usr/home/user3/public_html/cgi-bin but for my life I don't > > understand > > > why it doesn't run. I get a permission error in the > > browsers and the > > > access log says that Option ExecCGI is off. > > > > > > Script runs fine in the ScriptAlias directory. > > > > > > TIA for any assistance. > > > > > you've answered your own question > > > > > > > > Options FollowSymLinks > > > AllowOverride None > > > > > > > you gotta have > > Options ExecCGI > > in all your your stuff! > > > > dave > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-questions" in the body of the message > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message