Hi guys,


If you run the folowing php-scrip:
<?php readfile('/etc/passwd'); ?>
You get the passwords!! So I set php in safemode.

1.) Is this also avaibale in cgi?

IF YES: whitch script do you need?
IF YES: How to turned off? How to not allow anybody to see files in a dir after /home/sites/ ?

If NO: THANKS GOD!!! :D

Regards,
Babak

Using Perl on a server is actually a bigger security risk than PHP.

Basically you can't completely block out Perl even with a CGI Wrapper e.g. try installing something like admin pro on your system.

It allows you to view all the filesystem but you can't read them.

Yup :)
With cgiwrap (search for it @ www.google.com)