From:
[email protected]
On Mon, Aug 02, 2004 at 12:38:03 -0700, Diwaker Gupta wrote:
On pointing my browser to /awstats/first.pl, the browser tries to download the perl file, instead of showing the output as HTML.
Isn't this a security issue? CGI scripts can contain sensitive data (e.g. authentication details for databases).
IMO if the "cgi-script" handler is specified for a particular extension and
the CGI module isn't available, apache2 should produce an internal error,
not display the script.
Ray
--
"Text processing doesn't matter." Fortran.
Larry Wall on common fallacies of language design
--
To UNSUBSCRIBE, email to
[email protected]
with a subject of "unsubscribe". Trouble? Contact
[email protected]
--- SoupGate-Win32 v1.05
* Origin: you cannot sedate... all the things you hate (1:229/2)